Code injection

2017-02-2107:59:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

JSON

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

CPENameOperatorVersion
cms_made_simplele1.12.2
form_builderle0.8.1.5

CPE	Name	Operator	Version
	cms_made_simple	le	1.12.2
	form_builder	le	0.8.1.5

References

dev.cmsmadesimple.org/project/files/69

daylight-it.com/security-advisory-dlcs0001.html