CVE-2026-108903

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

CVE-2026-108903 pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

EUVD-2026-97066

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

CVE-2026-108903 pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

CVE-2026-108903: Reliance on Untrusted Inputs in a Security Decision

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

PT-2026-110213

Name of the Vulnerable Software and Affected Versions pH7Builder versions prior to 19.3.0 Description An issue exists that allows unauthenticated attackers to bypass CAPTCHA validation. By providing a client-chosen form ID to the isValid function within the PFBC Form class, attackers can skip...

CVE-2012-10005

CVE-2012-10005 affects the manikandan170890 php-form-builder-class, specifically the PFBC/Element/Textarea.php component (Textarea Handler). The vulnerability arises from improper handling of the value argument, enabling cross-site scripting (XSS) and allowing a remote attacker to exploit it. The...

CVE-2012-10005: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in manikandan170890 php-form-builder-class and classified as problematic. Affected by this vulnerability is an unknown functionality of the file PFBC/Element/Textarea.php of the component Textarea Handler. The manipulation of the argument value leads to cross site...