Advisories · Technology
PHP FormMail Generator.
Every CVE that names PHP FormMail Generator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
PHP forms generated using the PHP FormMail Generator are vulnerable to stored cross-site scripting
- PHP FormMail Generator
- Cross-site scripting (XSS)
-
PHP forms generated using the PHP FormMail Generator are vulnerable to unrestricted upload of dangerous file types
- PHP FormMail Generator
- Unrestricted file upload
-
PHP FormMail Generator generates PHP code for standard web forms, and the code generated does not properly validate user input folder directories and is vulnerable to path traversal
- PHP FormMail Generator
- Path traversal
-
PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to unsafe deserialization of untrusted data
- PHP FormMail Generator
- Insecure deserialization
-
PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass
- PHP FormMail Generator
- CWE-302