pbootcms pbootcms - vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

An issue exists in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter.

Pbootcms Pbootcms -

9.8

CVSSv3

apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI.

Pbootcms Pbootcms

9.8

CVSSv3

An issue exists in PbootCMS. There is a SQL injection via the api.php/List/index order parameter.

Pbootcms Pbootcms -

9.8

CVSSv3

PbootCMS below v3.2.0 exists to contain a command injection vulnerability via create_function.

Pbootcms Pbootcms

9.8

CVSSv3

SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string.

Pbootcms Pbootcms 1.2.1

7.2

CVSSv3

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php.

Pbootcms Pbootcms 1.3.2

4.8

CVSSv3

Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php.

Pbootcms Pbootcms 2.0.3

4.8

CVSSv3

Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.

Pbootcms Pbootcms 2.0.3

6.1

CVSSv3

A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file /admin.php?p=/Area/index#tab=t2. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The...

Pbootcms Pbootcms 3.2.5

8.1

CVSSv3

PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.

Pbootcms Pbootcms 1.2.1

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook