Submit #372602: formtools.org formtools 3.1.1 SSRFinfo

Titleformtools.org formtools 3.1.1 SSRF
DescriptionDownload Source Code:https://github.com/formtools/core The "actions.php" file implements the functionality for making remote URL requests. Auditing the source code reveals that the request method can be manually specified, such as curl_exec().
Source⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE2-3.md
User
 Dee.Mirage (UID 71702)
Submission07/11/2024 03:12 (2 years ago)
Moderation07/20/2024 08:11 (9 days later)
StatusAccepted
VulDB entry271992 [formtools.org Form Tools 3.1.1 Import Option List edit.php curl_exec url file inclusion]
Points17

Interested in the pricing of exploits?

See the underground prices here!