507 matches found
CVE-2019-8422
A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...
Sql injection
A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...
CVE-2019-8422
A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...
CVE-2019-8422
A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...
CVE-2019-8422
CVE-2019-8422 affects PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php, enabling SQL Injection . Connected sources report a base CVSS v3.0 score of 7.2 (HIGH) with network attack vector, low attack complexity, and impacts to confidentiality, int...
PT-2019-19024
Name of the Vulnerable Software and Affected Versions PbootCMS version 1.3.2 Description A SQL Injection issue exists via the description parameter in the ContentController.php file. Recommendations For PbootCMS version 1.3.2, consider restricting access to the description parameter in the...
CVE-2019-8422: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...
Cross site request forgery (csrf)
A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...
CVE-2019-7570
A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...
CVE-2019-7570
A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...
CVE-2019-7570
A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...
CVE-2019-7570
CVE-2019-7570 applies to PbootCMS v1.3.6, describing a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to delete user accounts via the admin.php/User/del/ucode/ endpoint. The connected sources confirm the affected product/version and the targeted action, with no additional...
PT-2019-18653
Name of the Vulnerable Software and Affected Versions PbootCMS version 1.3.6 Description A CSRF issue was discovered that can lead to the deletion of users. This occurs via the "admin.php/User/del/ucode/" API endpoint. Recommendations For PbootCMS version 1.3.6, consider disabling access to the...
CVE-2019-7570: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...
SQL Injection Vulnerability in PbootCMS Backend
PbootCMS is a new core open source enterprise building system developed by Avantech. There is a SQL injection vulnerability in PbootCMS backend. Attackers can use this vulnerability to obtain sensitive information in the database...
Sql injection
SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string...
CVE-2018-19893
SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string...
CVE-2018-19893
SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string...
CVE-2018-19893
CVE-2018-19893 concerns a SQL injection in PbootCMS 1.2.1. The vulnerability is in SearchController.php, exploitable via the index.php/Search/index.html query string. Attackers can trigger SQL injection remotely through the Search feature. Some connected sources also describe the issue as allowin...