VDB

GCVE-110-CERTCC-2016-494015

GCVE-110-CERTCC-2016-494015
Advisory PublishedCVSS 10.0/10
Vulnetix · Advisory published December 5, 2016
PHP FormMail Generator is a single-instance website that generates PHP code for standard web forms for inclusion into PHP or WordPress websites. The generated code is vulnerable to authentication bypass and unsafe deserialization of untrusted data.
Download JSON Open in Console

Risk Scores

CVSS 2.0
10.0/10
Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score10remediation_levelNDreport_confidenceNDenvironmental_score7.49587104target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2016-9482CVE-2016-9483CVE-2016-9484

References

PHP FormMail Generator generates code with multiple vulnerabilities
url
PHP FormMail Generator generates code with multiple vulnerabilities
url
PHP FormMail Generator generates code with multiple vulnerabilities
url
PHP FormMail Generator generates code with multiple vulnerabilities
url
PHP FormMail Generator generates code with multiple vulnerabilities
advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›