MicroEngine vulnerabilities
We track 2 vulnerabilities in MicroEngine products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 23, 2023.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest MicroEngine vulnerabilities
- 9.8 Critical severity
MicroEngine Mailform: Improper Limitation of a Pathname to a Restricted Directory
MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.
- 9.8 Critical severity
MicroEngine Mailform: Unrestricted Upload of File with Dangerous Type
Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.