What’s Vulnerable › Vulnerabilities

CVE-2022-38400

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-08 · updated 2026-06-17
• Weakness: CWE-200

Description

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.

Affected products

• SYNCK GRAPHICA Mailform Pro CGI: through 4.3.1

References

• https://jvn.jp/en/jp/JVN34205166/index.html
• https://www.synck.com/blogs/news/newsroom/detail_1661907555.html
• https://www.synck.com/downloads/cgi-perl/mailformpro/feature_1381250709.html
• https://www.synck.com/downloads/cgi-perl/mailformpro/index.html
• https://jvn.jp/en/jp/JVN34205166/index.html
• https://www.synck.com/blogs/news/newsroom/detail_1661907555.html
• https://www.synck.com/downloads/cgi-perl/mailformpro/feature_1381250709.html
• https://www.synck.com/downloads/cgi-perl/mailformpro/index.html

Get alerted when CVE-2022-38400 or the next vulnerability affects your stack