VYPR

Form Builder

by Cmsmadesimple

CVEs (3)

  • CVE-2017-6070CriFeb 21, 2017
    risk 0.64cvss 9.8epss 0.02

    CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

  • CVE-2017-6072MedFeb 21, 2017
    risk 0.35cvss 5.3epss 0.02

    CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin.

  • CVE-2017-6071MedFeb 21, 2017
    risk 0.35cvss 5.3epss 0.02

    CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.