CVE-2026-92381 PbootCMS Template Rendering ContentController.php decode_string cross site scripting

A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...

CVE-2026-92381 PbootCMS Template Rendering ContentController.php decode_string cross site scripting

A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...

CVE-2026-92381

PbootCMS up to 3.2.22 contains a cross-site scripting (XSS) vulnerability in the Template Rendering component, specifically in the decode_string function of apps/admin/controller/content/ContentController.php. Manipulation of the Title argument allows a remote attacker with low privileges and req...

PT-2026-93808

Name of the Vulnerable Software and Affected Versions PbootCMS versions prior to 3.2.23 Description A weakness in the Template Rendering component allows remote attackers to perform cross site scripting. The issue exists within the decode string function located in the...

CVE-2026-67960: Improper Control of Generation of Code

An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components...

Sql injection

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...

CVE-2019-8422

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...

PT-2019-19024

Name of the Vulnerable Software and Affected Versions PbootCMS version 1.3.2 Description A SQL Injection issue exists via the description parameter in the ContentController.php file. Recommendations For PbootCMS version 1.3.2, consider restricting access to the description parameter in the...

CVE-2019-8422: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...

PT-2017-12682

Name of the Vulnerable Software and Affected Versions FineCMS version 1.9.5 Description The issue allows remote attackers to operate on the website database. This is due to a problem in the ContentController.php file located in the controllers/member directory of FineCMS version 1.9.5...

CVE-2017-12774: Improper Neutralization of Special Elements used in an SQL Command

finecms in 1.9.5\controllers\member\ContentController.php allows remote attackers to operate website database...

FengCMS 1.21 /app/controller/contentController.php SQL注入漏洞

No description provided by source...

CVE-2010-5094

The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote attackers to delete index.php and "disrupt modrewrite-less URL routing."...

Design/Logic Flaw

The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote attackers to delete index.php and "disrupt modrewrite-less URL routing."...

CVE-2010-5094

The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote attackers to delete index.php and "disrupt modrewrite-less URL routing."...

CVE-2010-5094

The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote attackers to delete index.php and "disrupt modrewrite-less URL routing."...

CVE-2010-5094: Undefined Security Weakness

The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote attackers to delete index.php and "disrupt modrewrite-less URL routing."...

PT-2012-1337

Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.6 Description The issue concerns the deleteinstallfiles function in control/ContentController.php, which does not require ADMIN permissions. This allows remote attackers to delete index.php, disrupting m...