PHP FormMail Generator Security Bypass Vulnerability

PHP FormMail Generator is a suite of PHP applications for generating standard web forms for inclusion in PHP or WordPress websites. A security bypass vulnerability exists in PHP FormMail Generator. A remote attacker can use this vulnerability to bypass authentication and gain administrator access...

PHP FormMail Generator Security Bypass Vulnerability (CNVD-2016-12387)

PHP FormMail Generator is a suite of PHP applications for generating standard web forms for inclusion in PHP or WordPress websites. A security bypass vulnerability exists in PHP FormMail Generator. The vulnerability stems from the program incorrectly detecting a folder directory entered by the...

PHP FormMail Generator Security Bypass Vulnerability (CNVD-2016-12386)

PHP FormMail Generator is a suite of PHP applications for generating standard web forms for inclusion in PHP or WordPress websites. A security bypass vulnerability exists in PHP FormMail Generator. A remote attacker can exploit this vulnerability to inject PHP code or perform unauthorized...

PHP FormMail Generator generates code with multiple vulnerabilities

Overview PHP FormMail Generator is a single-instance website that generates PHP code for standard web forms for inclusion into PHP or WordPress websites. The generated code is vulnerable to authentication bypass and unsafe deserialization of untrusted data. Description CWE-302: Authentication...

Wordpress pondol-formmail plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. pondol-formmail is one of the e-mail processing plug-ins. A cross-site scripting vulnerability exists in version...

CVE-2016-1000146

Reflected XSS in wordpress plugin pondol-formmail v1.1...

CVE-2016-1000146

Reflected XSS in wordpress plugin pondol-formmail v1.1...

Cross site scripting

Reflected XSS in wordpress plugin pondol-formmail v1.1...

CVE-2016-1000146

CVE-2016-1000146 corresponds to a reflected XSS in WordPress Pondol Form to Mail plugin (= 1.2) or applying vendor patches. In summary, affected product: Pondol Form to Mail WordPress plugin, versions = 1.2 or apply patch.

CVE-2016-1000146

Reflected XSS in wordpress plugin pondol-formmail v1.1...

PT-2016-4538

Name of the Vulnerable Software and Affected Versions pondol-formmail version 1.1 Description The issue is related to a Reflected XSS in the wordpress plugin. Recommendations For version 1.1, update to a newer version that contains a fix for this issue...

CVE-2016-1000146: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin pondol-formmail v1.1...

CVE-2016-1230

Cross-site scripting XSS vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1230

Cross-site scripting XSS vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1230

The CVE-2016-1230 entry concerns WebARENA Service formmail by NTT PC Communications, with an XSS vulnerability in formmail before 2.2.1. The connected sources (e.g., JVN entries and CNVD/NVD records) confirm a cross-site scripting flaw (CWE-79) affecting formmail 2.2 and earlier, allowing an atta...

CVE-2016-1230

Cross-site scripting XSS vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1230: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-4655

Name of the Vulnerable Software and Affected Versions NTT PC Communications WebARENA Service formmail versions prior to 2.2.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors, potentially...

WebARENA formmail vulnerable to cross-site scripting

Overview formmail used for the WebARENA Service provided by NTT PC Communications Incorporated contains a cross-site scripting vulnerability CWE-79. OHTA, Yoshinori of Business Architects Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...