Mailform (Microengine) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2023-05-23. Vendor: Microengine.

CVEs of Mailform

• CVE-2023-27507 - CVSS 9.8 (critical), 2023-05-23: MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled,…
• CVE-2023-27397 - CVSS 9.8 (critical), 2023-05-23: Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save…