SQL Injection Vulnerability in Appnitro MachForm

CVE-2018-6411 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to the filters. If the filter is set to a whitelist, the dangerous extensions can be bypassed through ap_form_elements SQL Injection.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.