shouldiuse.io

VERDICT

Should I use Nubuilder?

Not disclosed - nubuilder.com

Depends. Buy it if you have PHP/MySQL skills and want a free, self-hosted MS Access replacement for internal database apps. Skip it if you want hosted, vendor-supported software or lack server administration resources.

Confidence

Medium. Based on ~40 public sources; security findings date to 2010 and target legacy versions, not current Forte 4.9.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

nuBuilder Forte (self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • Self-hosters replacing MS Access
  • PHP/MySQL shops building internal tools
  • Zero-budget database app projects
  • Developers wanting code-level control

Not for

  • Non-technical teams wanting hosted plug-and-play
  • Anyone needing vendor support or SLAs
  • Teams that cannot run and patch their own servers
  • Buyers expecting polished SaaS UX and mobile apps

Gotchas - check before you buy

high

You host it: server maintenance, backups, and security patching are entirely your job

high

2010 CVEs (XSS, directory traversal, file inclusion) target old versions; verify you run current Forte

medium

No vendor security page found — no clear vulnerability disclosure channel

medium

No paid support tier visible; help depends on volunteer community responsiveness

Pros and cons

Pros

  • Free and open-source — no licensing costs
  • Self-hosted: data stays on your own server, local or remote
  • Builds complex applications like invoicing
  • Standard tech: HTML, PHP, JavaScript, SQL — nothing proprietary
  • Rated 5/5 on plugin reviews

Cons

  • Requires PHP/MySQL hosting and manual installation
  • Old unpatched-era CVEs from 2010 on record
  • No security page published on vendor site
  • Small community; support is forums and GitHub only

Sources & method

Analyzed 9/26/2026 - 9 sources - Two 2010 CVEs on record (XSS, directory traversal) plus a file-inclusion exploit; vendor publishes no security page.

official x2review x4security x3
  • CVE-2010-2849 — cross-site scripting, XSS vulnerability in affecting nuBuilder 10.04.20; unscored.
  • CVE-2010-2850 — directory traversal, Directory traversal vulnerability in productionnu2/ affecting nuBuilder 10.04.20.
  • Remote file inclusion in report.php, Older nuBuilder failed to sanitize remote file includes (public exploit exists).

Key stats

  • Value for money: 5/5

    Rating

  • $0

    Starting price

  • 9

    Sources

  • Analyzed

  • Value for money: 5/5. Completely free and open-source
  • Ease of use: 3/5. Straightforward setup, but needs server and PHP skills
  • Feature depth: 4/5. Builds complex apps like invoicing; full code control
  • Support quality: 2/5. Community forums and GitHub only; no vendor SLA
  • Security posture: 2/5. 2010 CVEs on record; no vendor security page
  • $0 Price Free, open-source platform
  • 5/5 WordPress rating wordpress.org plugin reviews
  • 4.9 Current version nuBuilder Forte on GitHub
  • 2+ CVEs on record From 2010: XSS, directory traversal

Pricing

nuBuilder Forte (self-hosted)

$0

  • Full open-source low-code platform
  • Self-host on your own PHP/MySQL server
  • Community support only

Security

Two 2010 CVEs on record (XSS, directory traversal) plus a file-inclusion exploit; vendor publishes no security page.

  • CVE-2010-2849 — cross-site scriptingXSS vulnerability in affecting nuBuilder 10.04.20; unscored.⁷
  • CVE-2010-2850 — directory traversalDirectory traversal vulnerability in productionnu2/ affecting nuBuilder 10.04.20.⁸
  • Remote file inclusion in report.phpOlder nuBuilder failed to sanitize remote file includes (public exploit exists).

What users say

Users praise it as a free, lightweight MS Access replacement, but discussion centers on self-installation effort and required PHP skills.

“I love nuBuilder. It allows you to create”
SourceForge review
“nuBuilder Forte (Web based, either local or remote”
Reddit, r/sysadmin
“With its lightweight footprint and straightforward setu”
CNET download review

Alternatives

Compare Nubuilder with each alternative.

  • DaDaBIK

    Similar PHP database frontend; commercial option with paid support

    Nubuilder vs DaDaBIK

  • Zoho Creator

    Hosted low-code builder if you don't want to self-host

  • Saltcorn

    Open-source no-code alternative, also self-hosted

  • Scriptcase

    Commercial PHP code generator with more polish

Full analysis

Based on ~40 public sources; security findings date to 2010 and target legacy versions, not current Forte 4.9.

Free open-source web app builder — powerful if you can run PHP/MySQL yourself; wrong pick if you want hosted, supported software.

Methodology

Based on ~40 public sources; security findings date to 2010 and target legacy versions, not current Forte 4.9.

Sources

  1. nuBuilder Forte official sitenubuilder.com
    official
  2. nuBuilder Forte on GitHub (v4.9)github.com
    official
  3. SourceForge reviewssourceforge.net
    review
  4. wordpress.org plugin reviewswordpress.org
    review
  5. Medium: nuBuilderForte for rapid database application developmentmedium.com
    review
  6. Reddit r/sysadmin: Replacements for MS Accessreddit.com
    review
  7. CVE-2010-2849 — XSStenable.com
    security
  8. CVE-2010-2850 — directory traversalavd.aquasec.com
    security
  9. Exploit-DB: local file inclusionexploit-db.com
    security

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.