title: PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass
description: Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigating directly to /admin.php?mod=admin&func=panel
problem types: CWE-302
affected:
{
product: Generator
vendor: PHP FormMail
versions:
lessThan: 2016-12-06, status: affected, version: 2016-12-06, versionType: custom
}
solutions: The PHP FormMail Generator website as of 2016-12-06 generates PHP code that addresses these issues. Affected users are encouraged to regenerate the PHP form code using the website, or manually apply patches.