SQL Injection Vulnerability in Th***.php file of PawnBuilder CMS Frontend

SmallBuild CMS is a website management backend based on the OneThink open source framework. There is a SQL injection vulnerability in the Th.php file in the frontend of PawnBuilder CMS. Attackers can use the vulnerability to obtain database sensitive information...

Storage-type cross-site scripting vulnerability at the front-end posting message of PawnBuilder CMS

SmallBuild CMS is a website management backend based on the OneThink open source framework. A stored cross-site scripting vulnerability exists in the front-end posting message of PawnBuilder CMS. Attackers by building a CSRF add administrator user can insert malicious js code in the page to obtai...

SQL Injection Vulnerability in CMS ConfigController.class.php Page

SmallBuild CMS is a website management backend based on the OneThink open source framework. A SQL injection vulnerability exists in the PawnBuilder CMS ConfigController.class.php page. An attacker can exploit the vulnerability to obtain sensitive information about the database...