← back
CVE-2022-38400

CVE-2022-38400

EPSS 1.2%
Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.
Affected products
SYNCK GRAPHICA · Mailform Pro CGI

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://jvn.jp/en/jp/JVN34205166/index.htmlhttps://www.synck.com/blogs/news/newsroom/detail_1661907555.htmlhttps://www.synck.com/downloads/cgi-perl/mailformpro/feature_1381250709.htmlhttps://www.synck.com/downloads/cgi-perl/mailformpro/index.html