CVE-2018-19053 - PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, followed by a SELECT statement containing this PHP code

Back Back to CVE browser

HIGH

PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, followed by a SELECT statement containing this PHP code

Published Nov 7, 2018

7.2

HIGH

CVSS 3.0

EPSS 1.44%

Description

PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, followed by a SELECT statement containing this PHP code.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (1)

https://github.com/Pbootcms/Pbootcms/issues/2
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/Pbootcms/Pbootcms/issues/2		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 7, 2018

Updated Aug 5, 2024

Reserved Nov 6, 2018

Link CVE-2018-19053

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-19053

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-19053