Lucene search

K

Form Builder Security Vulnerabilities

cve

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

9.8CVSS

9.6AI Score

0.009EPSS

2017-02-21 07:59 AM

28

cve

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.

5.3CVSS

5.4AI Score

0.002EPSS

2017-02-21 07:59 AM

31

cve

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin.

5.3CVSS

5.4AI Score

0.002EPSS

2017-02-21 07:59 AM

34