CVE-2021-37497

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request...

CVE-2021-37497

CVE-2021-37497 affects PbootCMS 3.0.5. The vulnerability is a SQL injection in a route that allows remote attackers to execute arbitrary SQL via a crafted GET request. Impact is described as high (C/H/I/H, CVSS 3.1 base 9.8; network access, no user interaction required). A patch is typically rele...