Php Formmail Generator (Jqueryform) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2018-07-13. Vendor: Jqueryform.

CVEs of Php Formmail Generator

• CVE-2016-9484 - CVSS 7.5 (high), 2018-07-13: The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated attacker to perform a path traversal…
• CVE-2016-9483 - CVSS 9.8 (critical), 2018-07-13: The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthenticated…
• CVE-2016-9493 - CVSS 6.1 (medium), 2018-07-13: The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.lib.php file,…
• CVE-2016-9482 - CVSS 9.8 (critical), 2018-07-13: Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by…
• CVE-2016-9492 - CVSS 9.8 (critical), 2018-07-13: The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types. In the generated…