CVE-2020-22535

The CVE-2020-22535 entry affects PbootCMS 2.0.6 . The vulnerability is an Incorrect Access Control issue triggered by the list parameter in update function (upgradecontroller.php) . Multiple connected records corroborate the same description across CVE catalogs (NVD, Red Hat, CNVD, CVE List, CNNV...

CVE-2020-22535

Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php...

CVE-2020-22535

Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php...

PbootCMS Cross-Site Scripting Vulnerability

PbootCMS is an open source enterprise building content management system CMS using PHP language developed by PbootCMS individual developers. PbootCMS suffers from a cross-site scripting vulnerability that stems from the product's admin.php page not properly validating client-side data. An attacke...

PbootCMS 访问控制错误漏洞

PbootCMS is an open source enterprise website content management system CMS developed using the PHP language.The message board of PbootCMS 2.0.6 is vulnerable to an access control error. An attacker can exploit the access control error vulnerability by executing the list parameter in the update...

PT-2021-10768

Name of the Vulnerable Software and Affected Versions PbootCMS version 2.0.6 Description The issue is related to an Incorrect Access Control vulnerability. It can be exploited via the list parameter in the update function in upgradecontroller.php. Recommendations For PbootCMS version 2.0.6,...

CVE-2020-22535: Exposure of Resource to Wrong Sphere

Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php...

CVE-2020-23580

Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board...

CVE-2020-23580

Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board...

Remote code execution

Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board...

CVE-2020-23580

CVE-2020-23580 concerns a Remote Code Execution in PbootCMS 2.0.8, specifically via the message board function. The root cause described across connected sources is that the message board does not validate data, enabling an attacker to execute arbitrary code remotely. The vulnerability is treated...

CVE-2020-23580

Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board...

CVE-2020-20363

Crossi Site Scripting XSS vulnerability in PbootCMS 2.0.3 in admin.php...

CVE-2020-20363

Crossi Site Scripting XSS vulnerability in PbootCMS 2.0.3 in admin.php...

Cross site scripting

Crossi Site Scripting XSS vulnerability in PbootCMS 2.0.3 in admin.php...

CVE-2020-20363

Crossi Site Scripting XSS vulnerability in PbootCMS 2.0.3 in admin.php...

CVE-2020-20363

CVE-2020-20363 is a Cross‑Site Scripting (XSS) vulnerability in PbootCMS 2.0.3, specifically affecting the admin.php page. The connected CNVD/CNNVD entries describe the root cause as improper validation of client-side data in admin.php, enabling injection of script code. Other sources (NVD, Red H...

PbootCMS suffers from SQL injection vulnerability (CNVD-2021-51283)

PbootCMS is a new core permanent open source free PHP web development and building management system CMS developed by Avantech. PbootCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2021-10917

Name of the Vulnerable Software and Affected Versions PbootCMS version 2.0.8 Description A Remote Code Execution issue exists in the message board of the affected software. Recommendations For PbootCMS version 2.0.8, update to a newer version that contains a fix for this issue, if available. At t...

PbootCMS 安全漏洞

PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. PbootCMS has a security vulnerability, the vulnerability stems from the platform's message board function does not validate the data, an attacker can exploit the vulnerability to execute...