CVE Browser

PbootCMS User Management UserController.php mod cross-site request forgery

PbootCMS Template Rendering ContentController.php decode_string cross site scripting

PbootCMS Password MemberController.php retrieve password recovery

PbootCMS Backend UserController.php access control

PbootCMS Parameter MemberController.php alert_location cross site scripting

PbootCMS File Upload file.php incomplete blacklist

PbootCMS Member Login MemberController.php checkUsername sql injection

PbootCMS Header handle.php get_user_ip less trusted source

PbootCMS SQLite Database pbootcms.db file access

SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET request

PbootCMS Image server-side request forgery

PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2.

SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by…

PbootCMS IndexController.php path traversal

PbootCMS IndexController.php code injection

PbootCMS 3.2.8 is vulnerable to URL Redirect.

PbootCMS cross site scripting

Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a…

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.

PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.

Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.

Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php.

Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php.

Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board.