GCVE-110-CERTCC-2016-608591

Advisory PublishedCVSS 9.3/10

Vulnetix · Advisory published December 17, 2016

PHP forms generated using the PHP FormMail Generator are vulnerable to stored cross-site scripting and unrestricted upload of dangerous file types.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.3/10

Critical · AV:N/AC:M/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score7.7remediation_levelOFreport_confidenceCenvironmental_score5.78477982096target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2016-9492 CVE-2016-9493

References

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

url

PHP FormMail Generator generates code vulnerable to multiple issues

advisory

Browse GCVE Records

73,044 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON