Skip to content
OpenAdvisories
Unscored CVE-2016-9482 EUVD-2016-10288GHSA-mw66-7g34-8744

PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass

Published Jul 13, 2018 · Updated Aug 6, 2024 · Assigned by certcc

Vendor: PHP FormMail Product: Generator

Description

Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigating directly to /admin.php?mod=admin&func=panel

Affected products

VendorProductAffectedFixed
PHP FormMail Generator 2016-12-06 – < 2016-12-06 2016-12-06

References