FormosaSoft vulnerabilities
We track 2 vulnerabilities in FormosaSoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest FormosaSoft vulnerabilities
- 8.8 High severity
ee-class: Unrestricted Upload of File with Dangerous Type
The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include the file, resulting in arbitrary code exec
- 8.8 High severity
ee-class: Improper Neutralization of Special Elements used in an SQL Command
The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents.