← Back

Microengine

microengine

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Mailform
mailform
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-27507
1Microengine
1Mailform
Jun 17, 2026
May 23, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server an...Show more
MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.Show less
CVE-2023-27397
1Microengine
1Mailform
Jun 17, 2026
May 23, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary fil...Show more
Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.Show less