Microengine - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2023-05-23.

Products

• Mailform - 2 CVEs

Newest CVEs of Microengine

• CVE-2023-27507 - CVSS 9.8 (critical), 2023-05-23: MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled,…
• CVE-2023-27397 - CVSS 9.8 (critical), 2023-05-23: Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save…