422 matches found
CVE-2026-36239
CVE-2026-36239 CVE-2026-36239: Authenticated RCE in PbootCMS v3.2.12 backend sitecopyright Vulnerability Overview: A critical remote code execution RCE vulnerability has been identified in the sitecopyright functionality of the PbootCMS backend administration interface. Specifically, untrusted...
CVE-2026-79387-PbootCMS-SQL-Injection
CVE-2026-79387: SQL Injection in PbootCMS V3.2.5 User Management Module Overview...
CVE-2026-92383
A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the file apps/admin/controller/system/UserController.php of the component User Management. Such manipulation leads to cross-site request forgery...
CVE-2026-92381
A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...
CVE-2026-92383 PbootCMS User Management UserController.php mod cross-site request forgery
A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the file apps/admin/controller/system/UserController.php of the component User Management. Such manipulation leads to cross-site request forgery...
CVE-2026-92383
CVE-2026-92383 is a cross-site request forgery (CSRF) vulnerability in PbootCMS versions up to 3.2.24 , affecting the UserController::del and UserController::mod functions within the User Management component (apps/admin/controller/system/UserController.php). A remote attacker with no privileges ...
EUVD-2026-80832
A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the file apps/admin/controller/system/UserController.php of the component User Management. Such manipulation leads to cross-site request forgery...
CVE-2026-92383 PbootCMS User Management UserController.php mod cross-site request forgery
A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the file apps/admin/controller/system/UserController.php of the component User Management. Such manipulation leads to cross-site request forgery...
CVE-2026-92383 PbootCMS User Management UserController.php mod cross-site request forgery
A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the file apps/admin/controller/system/UserController.php of the component User Management. Such manipulation leads to cross-site request forgery...
CVE-2026-92381
PbootCMS up to 3.2.22 contains a cross-site scripting (XSS) vulnerability in the Template Rendering component, specifically in the decode_string function of apps/admin/controller/content/ContentController.php. Manipulation of the Title argument allows a remote attacker with low privileges and req...
CVE-2026-92381 PbootCMS Template Rendering ContentController.php decode_string cross site scripting
A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...
CVE-2026-92381 PbootCMS Template Rendering ContentController.php decode_string cross site scripting
A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...
EUVD-2026-80820
A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...
CVE-2026-92381 PbootCMS Template Rendering ContentController.php decode_string cross site scripting
A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...
CVE-2026-79387
SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields including passwords and roles via crafted parameters to the User/mod interface, enabling account takeover...
Exploit for CVE-2026-79387
CVE-2026-79387: SQL Injection in PbootCMS V3.2.5 User Manageme...
CVE-2026-79387
SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields including passwords and roles via crafted parameters to the User/mod interface, enabling account takeover...
PT-2026-89154
SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields including passwords and roles via crafted parameters to the User/mod interface, enabling account takeover...
CVE-2026-79387
SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields including passwords and roles via crafted parameters to the User/mod interface, enabling account takeover...
EUVD-2026-75157
SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields including passwords and roles via crafted parameters to the User/mod interface, enabling account takeover...