405 matches found
CVE-2026-36239
CVE-2026-36239 CVE-2026-36239: RCE Autenticado en el backend de PbootCMS v3.2.12 sitecopyright Resumen de la vulnerabilidad: Se ha identificado una vulnerabilidad crítica de ejecución remota de código RCE en la funcionalidad sitecopyright de la interfaz de administración del backend de PbootCMS...
CVE-2026-79387
SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields including passwords and roles via crafted parameters to the User/mod interface, enabling account takeover...
CVE-2026-79387-PbootCMS-SQL-Injection
CVE-2026-79387: SQL Injection in PbootCMS V3.2.5 User Management Module Overview...
EUVD-2026-75157
SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields including passwords and roles via crafted parameters to the User/mod interface, enabling account takeover...
CVE-2026-79387
CVE-2026-79387 is an SQL injection (CWE-89) in PbootCMS versions 3.2.0 through 3.2.5, located in the mod() method of UserController.php and modUser() in UserModel.php. The field and value GET parameters are concatenated directly into a SQL UPDATE statement without sanitization or parameterized qu...
EUVD-2026-60551
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components...
CVE-2026-67960
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components...
CVE-2026-67960
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components...
CVE-2026-67960
PbootCMS v.3.2.15 is vulnerable to arbitrary code execution through multiple components: MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php. The vulnerability is exploitable over the network with low complexity , no privileges required , and no ...
CVE-2026-67960
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components...
PT-2026-76872
Name of the Vulnerable Software and Affected Versions PbootCMS version 3.2.15 Description An issue allows an attacker to execute arbitrary code through the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components. Recommendations At the...
CVE-2026-12066
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/checkcode results in weak password...
CVE-2026-12066 PbootCMS Password MemberController.php retrieve password recovery
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/checkcode results in weak password...
CVE-2026-12066
CVE-2026-12066 affects PbootCMS up to version 3.2.12. The vulnerability resides in the function retrieve of file apps/home/controller/MemberController.php (Password Handler). Manipulating the arguments username/password/email/checkcode enables weak password recovery; the issue is exploitable remo...
CVE-2026-12066 PbootCMS Password MemberController.php retrieve password recovery
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/checkcode results in weak password...
EUVD-2026-36423
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/checkcode results in weak password...
CVE-2026-12066 PbootCMS Password MemberController.php retrieve password recovery
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/checkcode results in weak password...
PT-2026-48866
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/checkcode results in weak password...
