Vulnerabilities > Synck
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-05-26 | CVE-2025-41441 | Information Exposure Through an Error Message vulnerability in Synck Mailform PRO CGI 4.3.1.2 Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. | 5.3 |
| 2023-06-29 | CVE-2023-32610 | Unspecified vulnerability in Synck Mailform PRO CGI 4.3.1.2 Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition. | 7.5 |
| 2022-09-08 | CVE-2022-38400 | Information Exposure vulnerability in Synck Mailform PRO CGI Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL. | 5.9 |