Max CVSS 7.5 Min CVSS 5.0 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2016-9484 5.0
The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated attacker to perform a path traversal and access arbitrary files on the server. The PHP FormMail Generator website does not use ver
09-10-2019 - 23:20 13-07-2018 - 20:29
CVE-2016-9482 7.5
Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigating directly to /admin.php?mod=admin&func=panel
09-10-2019 - 23:20 13-07-2018 - 20:29
CVE-2016-9483 7.5
The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthenticated attacker may be able to use this vulnerability to inject PHP code, or along with CVE-2016-94
09-10-2019 - 23:20 13-07-2018 - 20:29
Back to Top Mark selected
Back to Top