MicroEngine Mailform vulnerabilities

2 known vulnerabilities in MicroEngine Mailform from MicroEngine. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  MicroEngine Mailform: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-27507May 23, 2023MicroEngineEPSS 1.28%

  MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.

• 9.8 Critical severity

  MicroEngine Mailform: Unrestricted Upload of File with Dangerous Type

  CVE-2023-27397May 23, 2023MicroEngine

  Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.