CVE-2018-18211

PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI...

Sql injection

PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI...

CVE-2018-18211

PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI...

CVE-2018-18211

PbootCMS 1.2.1 is affected by an SQL injection vulnerability. The issue occurs via HTTP POST data to the api.php/cms/addform?fcode=1 URI, enabling crafted input to influence SQL queries. This CVE is supported by multiple sources (NVD entry CVE-2018-18211 and related records) indicating a high-sev...

PT-2018-14372

Name of the Vulnerable Software and Affected Versions PbootCMS version 1.2.1 Description The issue is related to SQL injection, which can be exploited via HTTP POST data sent to the "api.php/cms/addform?fcode=1" endpoint. Recommendations For PbootCMS version 1.2.1, update to a newer version that...

CVE-2018-18211: Improper Neutralization of Special Elements used in an SQL Command

PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI...