Most recent entries from all

EUVD-2026-212930

fkie_cve-2023-28413

Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a remote unauthenticated attacker to obtain sensitive information, alter the website, or cause a denial-of-service (DoS) condition.

GHSA-h2cx-cfgv-2g8f

gsd-2023-28413

jvndb-2023-000050

WordPress Plugin "MW WP Form" and "Snow Monkey Forms" provided by Monkey Wrench Inc. contain multiple vulnerabilities listed below. * Directory traversal (CWE-22) - CVE-2023-28408 * Unrestricted upload of file with dangerous type (CWE-434) - CVE-2023-28409 * Directory traversal (CWE-22) - CVE-2023-28413 CVE-2023-28408 Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-28409 Shuya Ota of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-28413 Monkey Wrench Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.