507 matches found
CVE-2021-28245
PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account...
CVE-2021-28245
PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account...
CVE-2021-28245
PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account...
Sql injection
PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account...
CVE-2021-28245
PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account...
CVE-2021-28245
PbootCMS 3.0.4 contains a SQL injection vulnerability in index.php via the search parameter that can be exploited to add an administrator account and reveal sensitive information. This CVE (CVE-2021-28245) is documented across multiple feeds (NVD, Red Hat, CNVD, CVE lists) with consistent descrip...
PbootCMS SQL注入漏洞
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS 3.0.4 suffers from a SQL injection vulnerability. Attackers can use the vulnerability to add an administrator account through the index.php search parameter to obtain sensitive information...
PT-2021-17830
Name of the Vulnerable Software and Affected Versions: PbootCMS version 3.0.4 Description: The issue allows for SQL injection through the search parameter in index.php, potentially revealing sensitive information and enabling the addition of an admin account. Recommendations: For PbootCMS version...
CVE-2021-28245: Improper Neutralization of Special Elements used in an SQL Command
PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account...
Command execution vulnerability in PbootCMS (CNVD-2021-30081)
PbootCMS is an open source and free PHP enterprise web development and construction management system. PbootCMS has a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands...
PbootCMS suffers from SQL injection vulnerability (CNVD-2021-03394)
PbootCMS is an open source and free PHP enterprise web development and construction management system. PbootCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Command execution vulnerability in PbootCMS (CNVD-2021-00794)
PbootCMS is an open source free PHP enterprise web development and construction management system. PbootCMS has a command execution vulnerability that can be exploited by attackers to gain server privileges...
PbootCMS Cross-Site Request Forgery Vulnerability (CNVD-2020-68549)
PbootCMS is a new core open source enterprise building system developed by Avantech. A cross-site request forgery vulnerability exists in PbootCMS 1.3.2. An attacker can exploit this vulnerability to change user passwords...
CVE-2020-17901
Cross-site request forgery CSRF in PbootCMS 1.3.2 allows attackers to change the password of a user...
Cross site request forgery (csrf)
Cross-site request forgery CSRF in PbootCMS 1.3.2 allows attackers to change the password of a user...
CVE-2020-17901
CVE-2020-17901 concerns a CSRF flaw in PbootCMS 1.3.2 that enables an attacker to change a user’s password. The Red Hat and CNVD/CVE mirrors corroborate the same description: a cross-site request forgery issue affecting PbootCMS 1.3.2. The available documents do not provide root-cause details, af...
CVE-2020-17901
Cross-site request forgery CSRF in PbootCMS 1.3.2 allows attackers to change the password of a user...
PT-2020-15062
Name of the Vulnerable Software and Affected Versions PbootCMS version 1.3.2 Description The issue allows attackers to perform cross-site request forgery CSRF attacks, enabling them to change the password of a user. Recommendations For PbootCMS version 1.3.2, update to a version that includes a f...
PbootCMS 跨站请求伪造漏洞
PbootCMS is a new core open source enterprise building system developed by Avantech. A cross-site request forgery vulnerability exists in PbootCMS 1.3.2. An attacker can exploit this vulnerability to change user passwords...