VULNERABILITY INTELLIGENCE

CVE-2016-9484

CVSS score7.5 HIGH

EPSS probability4.35%

CISA KEVNot currently listed

Published2018-07-13

Last modified2026-06-17

Description

The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated attacker to perform a path traversal and access arbitrary files on the server. The PHP FormMail Generator website does not use version numbers and is updated continuously. Any PHP ... .