CVE-2017-6070

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0190%

EPSS Percentile23.16th

Published2017年2月21日

Last Modified2026年5月13日

Vulnerability Description

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

Affected Platforms (CPE)

📦

Cmsmadesimple

Form Builder

<= 0.8.1.5

📦

Cmsmadesimple

Cms Made Simple

<= 1.12.2

References & Advisories

🔗 http://dev.cmsmadesimple.org/project/files/69

🔗 https://daylight-it.com/security-advisory-dlcs0001.html