Lucene search
K

392 matches found

Prion
Prion
added 2024/01/04 8:15 a.m.19 views

Improper access control

Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform...

5CVSS7.1AI score0.00076EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2024/01/04 12:0 a.m.2 views

PbootCMS Security Vulnerability

PbootCMS is an open source enterprise website content management system CMS using PHP language developed by PbootCMS individual developers. A security vulnerability exists in PbootCMS version V3.1.2, which stems from the presence of a session leakage vulnerability that can be exploited by an...

7.5CVSS6.5AI score0.00076EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/01/04 12:0 a.m.2 views

PT-2024-13855 · Aoyun Technology · Pbootcms

Name of the Vulnerable Software and Affected Versions: Aoyun Technology pbootcms version 3.1.2 Description: The issue allows remote attackers to gain sensitive information via session leakage, enabling a user to avoid logging into the backend management platform. This is due to incorrect access...

7.5CVSS7.6AI score0.00076EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2024/01/04 12:0 a.m.2 views

CVE-2023-50082

Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform...

7.8AI score0.00076EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/01/04 12:0 a.m.9 views

CVE-2023-50082

Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform...

7.8AI score0.00076EPSS
Exploits1References2
CVE
CVE
added 2024/01/04 12:0 a.m.50 views

CVE-2023-50082

CVE-2023-50082 affects Aoyun Technology pbootcms v3.1.2 and is caused by Incorrect Access Control, enabling session leakage that can expose sensitive information and allow a user to avoid logging into the backend management platform. The provided connected documents consistently describe the issu...

7.5CVSS7.5AI score0.00076EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/08/24 6:15 p.m.1 views

CVE-2023-39834

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...

9.8CVSS5.8AI score0.00943EPSS
Exploits1References1
NVD
NVD
added 2023/08/24 6:15 p.m.12 views

CVE-2023-39834

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...

9.8CVSS9.8AI score0.00943EPSS
Exploits1References1
Prion
Prion
added 2023/08/24 6:15 p.m.39 views

Command injection

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...

7.5CVSS9.8AI score0.00943EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2023/08/24 12:0 a.m.135 views

CVE-2023-39834

CVE-2023-39834 affects PbootCMS prior to version 3.2.0. The vulnerability is a command injection via the create_function construct in PHP, with confirmed impact described across sources. Affected software: PbootCMS (PHP-based CMS); vulnerable component: create_function usage in versions before 3....

9.8CVSS9.7AI score0.00943EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/24 12:0 a.m.2 views

PT-2023-27125 · Pbootcms · Pbootcms

Name of the Vulnerable Software and Affected Versions: PbootCMS versions prior to 3.2.0 Description: A command injection issue was discovered via the create function, allowing for potential exploitation. Recommendations: For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the...

9.8CVSS9.7AI score0.00943EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/08/24 12:0 a.m.15 views

CVE-2023-39834

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...

10AI score0.00943EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/08/24 12:0 a.m.1 views

PbootCMS 命令注入漏洞

PbootCMS is PbootCMS individual developers of an open source enterprise website content management system CMS using PHP language development. PbootCMS v3.2.0 version has a security vulnerability, the vulnerability stems from createfunction has a command injection vulnerability...

9.8CVSS8.4AI score0.00943EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/08/24 12:0 a.m.7 views

CVE-2023-39834

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...

8AI score0.00943EPSS
Exploits1References1
CNVD
CNVD
added 2023/02/07 12:0 a.m.57 views

PbootCMS SQL Injection Vulnerability (CNVD-2023-11247)

PbootCMS is an open source enterprise building content management system CMS using PHP language developed by PbootCMS individual developers. A security vulnerability exists in PbootCMS version 3.0.5. An attacker can exploit the vulnerability to execute arbitrary SQL commands via a specially craft...

9.8CVSS9.9AI score0.00858EPSS
Exploits1References1
NVD
NVD
added 2023/02/03 6:15 p.m.9 views

CVE-2021-37497

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request...

9.8CVSS9.8AI score0.00858EPSS
Exploits1References2
OSV
OSV
added 2023/02/03 6:15 p.m.1 views

CVE-2021-37497

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request...

9.8CVSS6AI score0.00858EPSS
Exploits1References2
Prion
Prion
added 2023/02/03 6:15 p.m.15 views

Sql injection

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request...

7.5CVSS9.7AI score0.00858EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2023/02/03 12:0 a.m.2 views

PbootCMS SQL注入漏洞

PbootCMS is an open source enterprise building content management system CMS using PHP language developed by PbootCMS individual developers. A security vulnerability exists in PbootCMS version 3.0.5. An attacker can exploit the vulnerability to execute arbitrary SQL commands via a specially craft...

9.8CVSS8AI score0.00858EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/02/03 12:0 a.m.8 views

CVE-2021-37497

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request...

10AI score0.00858EPSS
Exploits1References2
Rows per page
Query Builder