Skip to content

CVE-2016-9482 PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass

CriticalCVSS 9.8 EPSS 4.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigating directly to /admin.php?mod=admin&func=panel

Affected products

ProductAffected versionsFixed in
jqueryform php formmail generator All versions No fix listed
PHP FormMail Generator >= 2016-12-06, < 2016-12-06 2016-12-06

References

  • 94778 third-party-advisory vdb-entry
  • VU#494015 third-party-advisory us-government-resource