507 matches found
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index...
PbootCMS 跨站请求伪造漏洞
PbootCMS is PbootCMS individual developers of an open source enterprise website content management system CMS developed using the PHP language. A security vulnerability exists in PbootCMS v2.0.3, which can be exploited by an attacker to view the added system administrators via the...
CVE-2020-20971
CVE-2020-20971 describes a CSRF vulnerability in PbootCMS v2.0.3, exploitable via /admin.php?p=/User/index. The CVSS 3.1 base score is 8.8 (HIGH) with network access, low attack complexity, no privileges required but user interaction required, and impacts on confidentiality, integrity, and availa...
CVE-2020-20971
Cross Site Request Forgery CSRF vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index...
PT-2022-8635
Name of the Vulnerable Software and Affected Versions PbootCMS version 2.0.3 Description A Cross Site Request Forgery CSRF issue exists, allowing unauthorized actions to be performed. The issue is exploited via the "/admin.php?p=/User/index" API endpoint. Recommendations For PbootCMS version 2.0....
CVE-2020-20971: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index...
CVE-2020-18456
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
CVE-2020-18456
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
CVE-2020-18456
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
CVE-2020-18456
CVE-2020-18456 affects PbootCMS v1.3.7, with a Cross Site Scripting (XSS) flaw exploitable via the title parameter in the mod function of SingleController.php. The root cause is improper handling of input in that function, allowing script injection that can affect users viewing crafted pages. Doc...
CVE-2020-18456
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
PbootCMS 跨站脚本漏洞
PbootCMS is PbootCMS individual developers of an open source enterprise site building content management system CMS using PHP language development. PbootCMS v1.3.7 suffers from a cross-site scripting vulnerability that originates from the title parameter in the SingleController.php mod function...
PT-2021-10178
Name of the Vulnerable Software and Affected Versions: PbootCMS version 1.3.7 Description: A Cross Site Scripting XSS issue exists due to the title parameter in the mod function in SingleController.php. Recommendations: For PbootCMS version 1.3.7, avoid using the title parameter in the mod functi...
CVE-2020-18456: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
PbootCMS Access Control Error Vulnerability
PbootCMS is an open source enterprise website content management system CMS developed using the PHP language.The message board of PbootCMS 2.0.6 is vulnerable to an access control error. An attacker can exploit the access control error vulnerability by executing the list parameter in the update...
PbootCMS Remote Code Execution Vulnerability
PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. PbootCMS has a security vulnerability, the vulnerability stems from the platform's message board function does not validate the data, an attacker can exploit the vulnerability to execute...
CVE-2020-22535
Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php...