CVE-2018-6409 An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap...
MediumCVSS 5.3
EPSS 13.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap_form table leads to a path traversal vulnerability via the download.php q parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| machform | = 4.2.3 | No fix listed |
References
- metalamin.github.io exploit third-party-advisory
- 44804 exploit third-party-advisory vdb-entry
- www.machform.com release-notes vendor-advisory