docuForm GmbH Client vulnerabilities
3 known CVE vulnerabilities in docuForm GmbH Client, translated and rated.
- CVE-2026-51925High
A Local File Inclusion (LFI) vulnerability exists in docuForm GmbH Client v.11.11c in the dfm-menu_report.php component. A remote attacker can exploit this flaw to read arbitrary files on the server, including sensitive configuration files, source code or system files, potentially leading to arbitrary code execution.
- CVE-2026-51924High
A vulnerability in docuForm GmbH Client version 11.11c allows a remote attacker to execute arbitrary code via the file upload mechanism and the report.php component.
- CVE-2026-51923High
An IDOR vulnerability in docuForm GmbH Client v.11.11c allows a remote attacker to execute arbitrary code via the user settings component and modify or retrieve sensitive data from other users' accounts.