← Vulnerability feed

Vulnerability record · CVE-2018-6409 · published 26 May 2018

CVE-2018-6409: Machform path traversal vulnerability

Machform · Machform

An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap_form table leads to a path traversal vulnerability via the download.php q parameter.

5.3 CVSS 3.0 Medium EPSS 15% · top 3.5% CWE-22 · Path traversal
5.3CVSS 3.0 base score, v2 5.0
15%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap_form table leads to a path traversal vulnerability via the download.php q parameter.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://metalamin.github.io/MachForm-not-0-day-EN/ ExploitThird Party Advisory
https://www.exploit-db.com/exploits/44804/ ExploitThird Party AdvisoryVDB Entry
https://www.machform.com/blog-machform-423-security-release/ Release NotesVendor Advisory
https://metalamin.github.io/MachForm-not-0-day-EN/ ExploitThird Party Advisory
https://www.exploit-db.com/exploits/44804/ ExploitThird Party AdvisoryVDB Entry
https://www.machform.com/blog-machform-423-security-release/ Release NotesVendor Advisory

Track CVE-2018-6409 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2024-37762Machform unrestricted file upload vulnerabilityMachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution.EPSS 1.5%9.8CVE-2018-6410Machform sql injection vulnerabilityAn issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter.EPSS 4.9%9.8CVE-2018-6411Machform unrestricted file upload vulnerabilityAn issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to …EPSS 5.8%8.8CVE-2024-37765Machform sql injection vulnerabilityMachform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page.EPSS 0.83%8.8CVE-2021-20102Machform cross-site request forgery vulnerabilityMachform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place.EPSS 0.51%8.1CVE-2021-20104Machform unrestricted file upload vulnerabilityMachform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded wit…EPSS 2.2%7.5CVE-2013-4948Machform sql injection vulnerabilitySQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the element_2 parameter.EPSS 3.5%6.8CVE-2013-4949Machform vulnerabilityUnrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then …EPSS 5.5%

Source: NIST National Vulnerability Database (record CVE-2018-6409), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.