CVE-2017-6072
Published Feb 21, 2017CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin.
Vendor/product archive
cmsmadesimple / form_builder CVEs
Beta · best-effort3 CVEs tagged to cmsmadesimple / form_builder — 1 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2017-6071
Published Feb 21, 2017CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.
CVE-2017-6070
Published Feb 21, 2017CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.
Showing 1-3 of 3 CVEsPage 1 of 1