CVE-2022-36532

CVE-2022-36532 개념 증명 Bolt CMS 5.1.12 이하 버전의 취약점으로, EDITORROLE 권한을 가진 인증된 사용자가 원격 코드 실행RCE을 달성할 수 있습니다. 이 스크립트를 사용하여 이 취약점을 탐지할 수 있습니다. 취약점에 대한 자세한 내용은 https://lutrasecurity.com/en/articles/cve-2022-36532/를 참조하세요. 사용법 스크립트를 실행하려면 사용자 이름, 해당 비밀번호, Bolt CMS 인스턴스 URL의 세 가지 매개변수가 필요합니다...

CVE-2019-1759-csrf-js-rce

CVE-2019-1759 Bolt-cms 3.6.10 Csrf - xss - rce 동영상 보기...

Bolt-CMS-3.6.2---Cross-Site-Scripting

Bolt CMS 3.6.2 - 크로스 사이트 스크립팅 취약점 Bolt CMS 3.6.2 - 크로스 사이트 스크립팅 취약점 CVE-2018-19933 https://vulners.com/cve/CVE-2018-19933 개념 증명PoC 취약점을 악용하려면, Bolt CMS 3.6.2는 텍스트를 입력하고 미리보기 버튼을 클릭할 때 XSS를 허용하며, 이는 새 항목New Entry을 구성할 때 Title 필드에서 확인할 수 있습니다. POST /preview/page HTTP/1.1 Host: 127.0.0.1:8000...

CVE-2025-25599

CVE-2025-25599 세부 사항 Bolt는 Symfony PHP 프레임워크를 사용하여 구축된 오픈소스 콘텐츠 관리 시스템입니다. 짧은 보안 평가 동안 Certitude는 임의 파일 읽기 를 포함한 여러 취약점을 식별했습니다. EDITOR , CHIEFEDITOR , ADMIN 또는 DEVELOPER 역할을 가진 사용자는 URL을 통해 아바타를 업로드 할 때 안전하지 않은 임시 파일 노출을 악용하여 기본 서버에서 임의 파일을 읽을 수 있습니다. 자세한 내용은 이 블로그 게시물을 참조하십시오. 개념 증명 Docker 테스트를...

CVE-2026-71291

Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allowtwig flag and a regex...

CVE-2026-71291 Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering

Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allowtwig flag and a regex...

CVE-2026-71291 Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering

Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allowtwig flag and a regex...

CVE-2026-71291 Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering

Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allowtwig flag and a regex...

CVE-2026-71291: Improper Neutralization of Special Elements Used in a Template Engine

Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allowtwig flag and a regex...

CVE-2026-11511

A weakness has been identified in Bolt CMS up to 3.7.5. This vulnerability affects unknown code of the file src/Storage/Field/Type/TextType.php of the component HTML Attribute Handler. Executing a manipulation of the argument style can lead to HTML injection. It is possible to launch the attack...

CVE-2026-11511

A weakness has been identified in Bolt CMS up to 3.7.5. This vulnerability affects unknown code of the file src/Storage/Field/Type/TextType.php of the component HTML Attribute Handler. Executing a manipulation of the argument style can lead to HTML injection. It is possible to launch the attack...

EUVD-2026-35059

A weakness has been identified in Bolt CMS up to 3.7.5. This vulnerability affects unknown code of the file src/Storage/Field/Type/TextType.php of the component HTML Attribute Handler. Executing a manipulation of the argument style can lead to HTML injection. It is possible to launch the attack...

CVE-2026-11511 Bolt CMS HTML Attribute TextType.php HTML injection

A weakness has been identified in Bolt CMS up to 3.7.5. This vulnerability affects unknown code of the file src/Storage/Field/Type/TextType.php of the component HTML Attribute Handler. Executing a manipulation of the argument style can lead to HTML injection. It is possible to launch the attack...

CVE-2026-11511

The CVE-2026-11511 affects Bolt CMS up to version 3.7.5, specifically a weakness in the file src/Storage/Field/Type/TextType.php within the HTML Attribute Handler. The issue enables remote HTML injection when an attacker manipulates the argument style. It is exploitable remotely and an exploit ha...

CVE-2026-11511: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A weakness has been identified in Bolt CMS up to 3.7.5. This vulnerability affects unknown code of the file src/Storage/Field/Type/TextType.php of the component HTML Attribute Handler. Executing a manipulation of the argument style can lead to HTML injection. It is possible to launch the attack...

Bolt CMS 注入漏洞

Bolt CMS is an open-source content management system based on PHP, developed by Bolt CMS. Versions of Bolt CMS 3.7.5 and earlier have a vulnerability related to injection attacks. This vulnerability stems from the handling of the 'style' parameter in the Component HTML Attribute Handler file,...

SQL Injection

Overview bolt/bolt is a sophisticated, lightweight & simple CMS. Affected versions of this package are vulnerable to SQL Injection via the order parameter in content listing pages through the OrderDirective component. An attacker can extract sensitive information from the database by injecting...

CVE-2026-39229

Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through the OrderDirective component. This allows for the extraction of sensitive information...

PT-2026-44900

Name of the Vulnerable Software and Affected Versions Bolt CMS versions prior to 3.7.1 Description An authenticated attacker with low-level privileges can perform SQL Injection via the order parameter on content listing pages. This issue occurs within the OrderDirective component and can be used ...

CVE-2026-39229

Bolt CMS versions through 3.7.0 are vulnerable to SQL Injection due to improper neutralization of special elements in the order parameter of content listing pages. The vulnerability exists within the OrderDirective component, allowing an authenticated attacker with low-level privileges to inject ...