← Back

Ark Web

ark-web

5 CVEs • 6 products

Products (6)

Click to collapse
Toggle
A Form
a-form
2 CVEs
A Form Pc
a-form_pc
2 CVEs
A Form Pc Mobile
a-form_pc_mobile
2 CVEs
A Form Bamboo
a-form_bamboo
1 CVE
A Member
a-member
1 CVE
A Reserve
a-reserve
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-38972
1Ark Web
1A Form
Jun 17, 2026
Sep 12, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inj...Show more
Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inject an arbitrary script.Show less
CVE-2017-10899
1Ark Web
1A Reserve
May 13, 2026
Dec 1, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.
CVE-2017-10898
1Ark Web
1A Member
May 13, 2026
Dec 1, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.
CVE-2011-4274
1Ark Web
2A Form Pc
A Form Pc Mobile
Apr 29, 2026
Nov 3, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerabili...Show more
Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676.Show less
CVE-2011-2676
1Ark Web
4A Form
A Form BambooA Form Pc+1 more
Apr 29, 2026
Nov 3, 2011
N/A· v4
N/A· v3
5.5 MEDIUM· v2
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to m...Show more
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.Show less