507 matches found
Improper access control
Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform...
CVE-2023-50082: Undefined Security Weakness
Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform...
CVE-2023-50082
Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform...
PbootCMS Security Vulnerability
PbootCMS is an open source enterprise website content management system CMS using PHP language developed by PbootCMS individual developers. A security vulnerability exists in PbootCMS version V3.1.2, which stems from the presence of a session leakage vulnerability that can be exploited by an...
PT-2024-13855 · Aoyun Technology · Pbootcms
Name of the Vulnerable Software and Affected Versions: Aoyun Technology pbootcms version 3.1.2 Description: The issue allows remote attackers to gain sensitive information via session leakage, enabling a user to avoid logging into the backend management platform. This is due to incorrect access...
CVE-2023-50082
Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform...
CVE-2023-50082
CVE-2023-50082 affects Aoyun Technology pbootcms v3.1.2 and is caused by Incorrect Access Control, enabling session leakage that can expose sensitive information and allow a user to avoid logging into the backend management platform. The provided connected documents consistently describe the issu...
CVE-2023-39834
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...
CVE-2023-39834
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...
Command injection
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...
PbootCMS 命令注入漏洞
PbootCMS is PbootCMS individual developers of an open source enterprise website content management system CMS using PHP language development. PbootCMS v3.2.0 version has a security vulnerability, the vulnerability stems from createfunction has a command injection vulnerability...
CVE-2023-39834
CVE-2023-39834 affects PbootCMS prior to version 3.2.0. The vulnerability is a command injection via the create_function construct in PHP, with confirmed impact described across sources. Affected software: PbootCMS (PHP-based CMS); vulnerable component: create_function usage in versions before 3....
CVE-2023-39834
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...
PT-2023-27125 · Pbootcms · Pbootcms
Name of the Vulnerable Software and Affected Versions: PbootCMS versions prior to 3.2.0 Description: A command injection issue was discovered via the create function, allowing for potential exploitation. Recommendations: For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the...
CVE-2023-39834: Improper Neutralization of Special Elements used in a Command
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...
CVE-2023-39834
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...
PbootCMS SQL Injection Vulnerability (CNVD-2023-11247)
PbootCMS is an open source enterprise building content management system CMS using PHP language developed by PbootCMS individual developers. A security vulnerability exists in PbootCMS version 3.0.5. An attacker can exploit the vulnerability to execute arbitrary SQL commands via a specially craft...
CVE-2021-37497
SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request...