CVE-2025-41441 — SYNCK GRAPHICA / Mailform Pro CGI

CVE-2025-41441

SYNCK GRAPHICA / Mailform Pro CGI PUBLISHED

Description (CNA)

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature.

Affected (CNA)

Vendor / product	Versions
SYNCK GRAPHICA / Mailform Pro CGI	affected prior to 4.3.4

CWE

CWE-209

References

https://www.synck.com/blogs/news/newsroom/detail_1745302910.html
https://jvn.jp/en/jp/JVN39546799/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.