CVE-2025-46109

CVE-2025-46109 affects pbootCMS versions 3.2.5 and 3.2.10, where uncleaned inputs enable SQL injection via a crafted GET request. Several connected sources (Red Hat, CNNVD, PT Security, OSV/NVD) corroborate a remote attacker can obtain sensitive information. The root cause is an input handling fl...