Formidable Forms passed every POST value read through FrmAppHelper::get_post_param() to maybe_unserialize(), so an unauthenticated visitor could submit a serialized PHP object in a parameter such as form_id and have it instantiated on any front-end request. With a suitable gadget class present this can lead to code execution or data tampering.... Weiterlesen: PHP Object Injection via Unsafe Deserialization of POST Parameters in…
Intelligence View
⚡ tsecurity.de Intelligence
PHP Object Injection via Unsafe Deserialization of POST Parameters in Formidable Forms
Formidable Forms passed every POST value read through FrmAppHelper::get_post_param() to maybe_unserialize(), so an unauthenticated visitor could submit a…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Scan public-facing services with OpenVAS, sharpen WAF rules, shorten patch windows.
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
13 sources
CVE-2026-30575 | SourceCodester Pharmacy Product Management System 1.0 add-stock.php txtqty logic error
12 more sources
VVulDB Updates1 day agoCVE-2026-30534 | SourceCodester Food Ordering System 1.0 Parameter manage_category.php id sql injection VVulDB Updates1 day agoCVE-2026-30531 | SourceCodester Online Food Ordering System 1.0 Parameter Actions.php save_category name sql injection VVulDB Updates1 day agoCVE-2026-30571 | SourceCodester Inventory System 1.0 Parameter view_category.php limit cross site scripting VVulDB Updates1 day agoCVE-2026-30570 | SourceCodester Inventory System 1.0 Parameter view_sales.php limit cross site scripting VVulDB Updates1 day agoCVE-2026-30569 | SourceCodester Inventory System 1.0 Parameter view_stock_availability.php limit cross site scripting VVulDB Updates1 day agoCVE-2026-30532 | SourceCodester Online Food Ordering System 1.0 Parameter admin/view_product.php id sql injection
+6
9 sources
Nvidia-Aufsichtsrat berät über Zukunft von Firmenchef Huang
8 more sources
SSlashdot1 day agoNvidia and Jensen Huang Face Shareholder Lawsuit Alleging Investors Were Misled About Spy Affair SSlashdot1 day agoJensen Huang Said to Have Had Relationship With Nvidia Executive Who Reports to Him WWinFuture News1 day agoNvidia bereitet offenbar den Rauswurf von CEO Jen-Hsun Huang vor NNYT > Technology1 day agoJensen Huang Said to Have Had Relationship With Nvidia Executive Who Reports to Him TTechCrunch1 day agoJensen Huang accused of having another affair — with an Nvidia exec TTechCrunch1 day agoNvidia’s stock drops as board reportedly preps to oust CEO Jensen Huang
+2
8 sources
5 Best AI Anime Video Generators in 2026, and Are AI Anime Videos Worth Making?
7 more sources
CCyber Security News22 hours agoTop 10 Best PCI DSS Compliance Tools in 2026 [Ranked & Scored] IIT Security News21 hours agoTop 10 Best GDPR Compliance Software in 2026 [Ranked & Scored] IIT Security News21 hours agoTop 10 Best Cybersecurity Maturity Assessment Tools in 2026 [Ranked & Scored] IIT Security News21 hours agoTop 10 Best IT & Cyber Risk Management Tools in 2026 [Ranked & Scored] IIT Security News21 hours agoTop 10 Best HIPAA Compliance Software in 2026 [Ranked & Scored] TTechRepublic1 day agoBest Apple Black Friday Deals 2026: MacBooks, iPhones, iPads, and More
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4325209/vulnerabilities-cve/php-object-injection-via-unsafe-deserialization-of-post-parameters-in-formidable-forms/