CVE-2017-6070

Critical

Published: 21/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CMS Made Simple version 1.x before 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

Risk Assessment

Exploitation of this vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to upgrade CMS Made Simple to version 0.8.1.6 or later to mitigate this vulnerability.

Original NVD description (English source)

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.