critical9.8
CVE-2017-6070
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter i…
Impact
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmsmadesimple | Form Builder | through 0.8.1.5 |
| Cmsmadesimple | Cms Made Simple | through 1.12.2 |