CVE-2019-17417

PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...

CVE-2019-17417

PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...

Cross site scripting

PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...

PbootCMS Cross-Site Scripting Vulnerability

PbootCMS is a new core open source enterprise building system developed by Avantech. A cross-site scripting vulnerability exists in PbootCMS 2.0.2, which can be exploited to conduct cross-site scripting attacks via routes involving Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URI...

CVE-2019-17417

PbootCMS 2.0.2 is reported vulnerable to cross-site scripting (XSS) via routes such as Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/. The root cause is a reflected/Stored XSS vector in these URIs that allows injection of malicious scripts within the context of authenticated or unaut...

CVE-2019-17417

PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...

Command execution vulnerability in PbootCMS v1.4.1 frontend search page template

PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system, is a set of efficient, simple, strong and free commercial PHP CMS source code. PbootCMSv1.4.1 front-end search page templates have a command execution vulnerability that ca...

Remote Code Execution Vulnerability in PbootCMS V1.3.8 Backend

PbootCMS is a PHP enterprise web development and construction management system developed by Avantech. PbootCMS V1.3.8 remote code execution vulnerability exists in the background, attackers can use the vulnerability to obtain control of the web server...

CVE-2019-8422

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...

Sql injection

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...

CVE-2019-8422

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...

CVE-2019-8422

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...

CVE-2019-8422

CVE-2019-8422 affects PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php, enabling SQL Injection . Connected sources report a base CVSS v3.0 score of 7.2 (HIGH) with network attack vector, low attack complexity, and impacts to confidentiality, int...

Cross site request forgery (csrf)

A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...

CVE-2019-7570

A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...

CVE-2019-7570

A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...

CVE-2019-7570

A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...

CVE-2019-7570

CVE-2019-7570 applies to PbootCMS v1.3.6, describing a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to delete user accounts via the admin.php/User/del/ucode/ endpoint. The connected sources confirm the affected product/version and the targeted action, with no additional...

SQL Injection Vulnerability in PbootCMS Backend

PbootCMS is a new core open source enterprise building system developed by Avantech. There is a SQL injection vulnerability in PbootCMS backend. Attackers can use this vulnerability to obtain sensitive information in the database...

CVE-2018-19893

SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string...