Vulnerabilities

TI-2017-03979 CVE-2017-6072 · GHSA-94pr-jvgr-6h8f

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers…

LOW 27

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0159 Published 2017-02-21 No fix listed CWE-200

TI-2017-03978 CVE-2017-6071 · GHSA-qw6x-wp2f-5h9m

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers…

LOW 27

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01595 Published 2017-02-21 No fix listed CWE-200

TI-2017-03977 CVE-2017-6070 · GHSA-5mx8-36j6-pq86

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers…

MEDIUM 46

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02262 Published 2017-02-21 No fix listed CWE-200

Vulnerabilities

Filters

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers…

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers…

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers…