EUVD-2020-10380

Malware in sbrugna...

CVE-2020-18456

Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...

CVE-2020-18456

Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...

CVE-2020-18456

CVE-2020-18456 affects PbootCMS v1.3.7, with a Cross Site Scripting (XSS) flaw exploitable via the title parameter in the mod function of SingleController.php. The root cause is improper handling of input in that function, allowing script injection that can affect users viewing crafted pages. Doc...

CVE-2020-18456: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...

CVE-2018-18450

apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI...

CVE-2018-18450: Improper Neutralization of Special Elements used in an SQL Command

apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI...