Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-78839

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Appnitro
Products
Machform
CVE-2026-78838

A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filter[filters][0][field] parameter.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Appnitro
Products
Machform
CVE-2026-78837

A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Appnitro
Products
Machform