10 matches found
EUVD-2020-10380
Malware in sbrugna...
CVE-2020-18456
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
CVE-2020-18456
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
CVE-2020-18456
CVE-2020-18456 affects PbootCMS v1.3.7, with a Cross Site Scripting (XSS) flaw exploitable via the title parameter in the mod function of SingleController.php. The root cause is improper handling of input in that function, allowing script injection that can affect users viewing crafted pages. Doc...
CVE-2020-18456
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
CVE-2020-18456: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...
PT-2021-10178
Name of the Vulnerable Software and Affected Versions: PbootCMS version 1.3.7 Description: A Cross Site Scripting XSS issue exists due to the title parameter in the mod function in SingleController.php. Recommendations: For PbootCMS version 1.3.7, avoid using the title parameter in the mod functi...
CVE-2018-18450
apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI...
PT-2018-14467
Name of the Vulnerable Software and Affected Versions PbootCMS versions prior to V1.3.0 Description The issue is related to SQL Injection in the SingleController.php file. It can be exploited by sending POST data to the "admin.php/Single/mod/mcode/1/id/3" API endpoint. Recommendations For version...
CVE-2018-18450: Improper Neutralization of Special Elements used in an SQL Command
apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI...