CVE-2017-6070

2017-02-2107:46:00

mitre

www.cve.org

9.7 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

JSON

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

References

dev.cmsmadesimple.org/project/files/69

daylight-it.com/security-advisory-dlcs0001.html