Php Formmail - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2018-07-13.

Products

CVE-2016-9484 - CVSS 7.5 (high), 2018-07-13: The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated attacker to perform a path traversal…
CVE-2016-9483 - CVSS 9.8 (critical), 2018-07-13: The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthenticated…
CVE-2016-9493 - CVSS 6.1 (medium), 2018-07-13: The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.lib.php file,…
CVE-2016-9482 - CVSS 9.8 (critical), 2018-07-13: Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by…
CVE-2016-9492 - CVSS 9.8 (critical), 2018-07-13: The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types. In the generated…