507 matches found
CVE-2018-16357: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter...
PT-2020-8558
Name of the Vulnerable Software and Affected Versions: PbootCMS affected versions not specified Description: An issue was discovered in PbootCMS, where there is a SQL injection via the "api.php/Cms/search" endpoint, specifically through the order parameter. Recommendations: At the moment, there i...
CVE-2018-16356: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter...
PT-2020-8557
Name of the Vulnerable Software and Affected Versions: PbootCMS affected versions not specified Description: An issue was discovered in PbootCMS, where there is a SQL injection via the "api.php/List/index" endpoint, specifically through the order parameter. Recommendations: At the moment, there i...
Command Execution Vulnerability in PbootCMS V1.3.2
PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. PbootCMS V1.3.2 suffers from a command execution vulnerability that can be exploited by an attacker to execute code...
Information leakage vulnerability in PbootCMS of Hunan Avant Cloud Network Technology Co.
PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system , is a set of efficient , simple , strong and free commercial PHP CMS source code , to meet the needs of various types of enterprise website development and construction...
Command Execution Vulnerability in PbootCMS V2.0.3 Backend
PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system , is a set of free commercial PHP CMS source code , to meet the needs of enterprise website development and construction . A command execution vulnerability exists in the...
Command execution vulnerability in PbootCMS Pa***.php page
PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system , is a set of free commercial PHP CMS source code , to meet the needs of enterprise website development and construction . A command execution vulnerability exists in the...
CVE-2019-17417
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...
CVE-2019-17417
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...
Cross site scripting
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...
PbootCMS Cross-Site Scripting Vulnerability
PbootCMS is a new core open source enterprise building system developed by Avantech. A cross-site scripting vulnerability exists in PbootCMS 2.0.2, which can be exploited to conduct cross-site scripting attacks via routes involving Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URI...
CVE-2019-17417
PbootCMS 2.0.2 is reported vulnerable to cross-site scripting (XSS) via routes such as Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/. The root cause is a reflected/Stored XSS vector in these URIs that allows injection of malicious scripts within the context of authenticated or unaut...
CVE-2019-17417
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...
CVE-2019-17417
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...
PT-2019-15142
Name of the Vulnerable Software and Affected Versions PbootCMS version 2.0.2 Description The issue allows for XSS attacks through specific URI vectors. The affected API endpoints include "Pboot/admin.php?p=/Single/index/mcode/1" and "Pboot/?contact/". Recommendations For PbootCMS version 2.0.2,...
CVE-2019-17417: Improper Neutralization of Input During Web Page Generation
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...
Command execution vulnerability in PbootCMS v1.4.1 frontend search page template
PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system, is a set of efficient, simple, strong and free commercial PHP CMS source code. PbootCMSv1.4.1 front-end search page templates have a command execution vulnerability that ca...
Remote Code Execution Vulnerability in PbootCMS V1.3.8 Backend
PbootCMS is a PHP enterprise web development and construction management system developed by Avantech. PbootCMS V1.3.8 remote code execution vulnerability exists in the background, attackers can use the vulnerability to obtain control of the web server...