471 matches found
Code Execution Vulnerability in PbootCMS Version V1.1.4
PbootCMS is an efficient, simple, strong open source PHP enterprise website development and construction management system. A code execution vulnerability exists in PbootCMS version V1.1.4, which can be exploited by attackers to execute remote code...
File Inclusion Vulnerability in PbootCMS Version 1.1.4
PbootCMS is a new core open source enterprise building system developed by Avantech. A file inclusion vulnerability exists in PbootCMS v1.1.4. An attacker can exploit the vulnerability to include malicious files and gain control of the web server...
PbootCMS 'scode' Parameter SQL Injection Vulnerability
PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. A SQL injection vulnerability exists in PbootCMS version 1.0.9. A remote attacker can exploit this vulnerability by sending the 'scode' parameter to the...
CVE-2018-11369
An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter...
CVE-2018-11369
An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter...
Sql injection
An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter...
CVE-2018-11369
PbootCMS v1.0.9 is affected by CVE-2018-11369. The vulnerability is a SQL injection in the ParserController.php, triggered via the scode parameter under apps/home/controller. The underlying issue is unsafe handling of the scode input, enabling an attacker to retrieve data from the database. Docum...
CVE-2018-11369
An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter...
PbootCMS v1.0.9 suffers from SQL injection vulnerability
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS v1.0.9 version exists SQL injection vulnerability. Attackers can use the vulnerability to control parameters to achieve SQL injection to obtain important information about the database...
CVE-2018-11369: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter...
PbootCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-12919)
PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. A cross-site request forgery vulnerability exists in the apps/admin/controller/system/RoleController.php file in PbootCMS version 1.0.7. A remote attacker can exploit this vulnerability ...
CVE-2018-11018
An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery CSRF vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts via admin.php/role/add.html...
CVE-2018-11018
An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery CSRF vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts via admin.php/role/add.html...
Cross site request forgery (csrf)
An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery CSRF vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts via admin.php/role/add.html...
CVE-2018-11018
An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery CSRF vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts via admin.php/role/add.html...
CVE-2018-11018
PbootCMS v1.0.7 contains a Cross‑Site Request Forgery (CSRF) vulnerability in apps/admin/controller/system/RoleController.php that enables remote attackers to add administrator accounts via admin.php/role/add.html. Affected software: PbootCMS 1.0.7. Root cause: CSRF in role management workflow al...
CVE-2018-11018: Cross-Site Request Forgery (CSRF)
An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery CSRF vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts via admin.php/role/add.html...
PbootCMS PHP Code Injection Vulnerability
PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. A security vulnerability exists in PbootCMS version 0.9.8. The vulnerability can be exploited to inject HPH code with the help of IF tags on the index.php/About/6.html or...
PbootCMS Cross-Site Request Forgery Vulnerability
PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. A cross-site request forgery vulnerability exists in PbootCMS version 0.9.8. A remote attacker can exploit this vulnerability by sending admin.php/Message/mod/id/19.html?backurl=/index.p...