Approved changes feed: RSS · Atom

cpe:2.3:a:jqueryform:php_formmail_generator:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorJqueryform (d08c9664-94a6-53db-a04f-0d3cb56e0bf0)
ProductPhp Formmail Generator (c55eb9e8-7581-593c-8ac7-3a5858f6f7af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9483 vulnerable 2026-06-08 05:08:23.983321 PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to unsafe deserialization of untrusted data
The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthenticated attacker may be able to use this vulnerability to inject PHP code, or along with CVE-2016-9484 to perform local file inclusion attacks and obtain files from the server.
Published: 2018-07-13T20:00:00.000Z
Updated: 2024-08-06T02:50:38.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9482 vulnerable 2026-06-08 05:08:23.982870 PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass
Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigating directly to /admin.php?mod=admin&func=panel
Published: 2018-07-13T20:00:00.000Z
Updated: 2024-08-06T02:50:38.590Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.