Cmsmadesimple: >> Form Builder >> 0.2 Security Vulnerabilities
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.
CVSS Score
9.8
EPSS Score
0.008
Published
2017-02-21
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.
CVSS Score
5.3
EPSS Score
0.003
Published
2017-02-21
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin.
CVSS Score
5.3
EPSS Score
0.002
Published
2017-02-21