CVE-2019-16676: Improper Input Validation

Plataformatec Simple Form has Incorrect Access Control in filemethod? in lib/simpleform/formbuilder.rb, because a user-supplied string is invoked as a method call...

PT-2019-14761

Name of the Vulnerable Software and Affected Versions Plataformatec Simple Form versions prior to 5.0 Description The issue is related to incorrect access control in the file method? function, located in lib/simple form/form builder.rb. This allows a user-supplied string to be invoked as a method...

simple_form Gem for Ruby Incorrect Access Control for forms based on user input

Simple Form before 5.0 has Incorrect Access Control in filemethod? in lib/simpleform/formbuilder.rb, because a user-supplied string is invoked as a method call. This only happens for pages that build forms based on user input...

PT-2017-16880

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 1.x Form Builder before version 0.8.1.6 Description The issue allows remote attackers to conduct information-disclosure attacks. This is possible via the default admin interface. Recommendations For CMS Made Simple...

Simple Form Mail Relaying via Subject Tags Vulnerability

The target is running at least one instance of Simple Form which fails to remove newlines from variables used to construct message headers. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Simple Form Mail Relaying Vulnerability

The target is running at least one instance of Simple Form which fails to validate the parameters SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Simple Form Subject Tags Arbitrary Mail Relay

The target is running at least one instance of Simple Form which fails to remove newlines from variables used to construct message headers. A remote attacker can exploit this flaw to add to the list of recipients, enabling him to use Simple Form on the target as a proxy for sending abusive mail o...

Simple Form Multiple Parameter Arbitrary Mail Relaying

The target is running at least one instance of Simple Form, which fails to validate the parameters 'adminemailto' and 'adminemailfrom'. An attacker, exploiting this flaw, would be able to send email through the server utilizing the form to any arbitrary recipient with any arbitrary message conten...