Vulnerability index

Browse CVEs

31 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Pbootcms MEDIUM 5.9
CVE-2025-15153

A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Databa…

Fix: after 3.2.12
Fix from $1,600 2025-12-28
Pbootcms MEDIUM 5.3
CVE-2025-15154

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handl…

Fix: after 3.2.12
Fix from $1,600 2025-12-28
Pbootcms HIGH 8.8
CVE-2025-46109

SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET request

Fix: after 3.2.10
Fix from $1,950 2025-06-18
Pbootcms MEDIUM 6.5
CVE-2025-3787

A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. T…

No fix yet
Fix from $1,600 2025-04-18
Pbootcms MEDIUM 6.1
CVE-2025-29389

PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2.

No fix yet
Fix from $1,600 2025-04-09
Pbootcms MEDIUM 5.1
CVE-2020-19248

SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template …

Fix: after 1.4.1
Fix from $1,600 2025-02-21
Pbootcms CRITICAL 9.8
CVE-2024-12789

A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file apps/home/controller/…

Fix: 3.2.4+
Fix from $2,300 2024-12-19
Pbootcms MEDIUM 6.1
CVE-2024-42930

PbootCMS 3.2.8 is vulnerable to URL Redirect.

Mitigation only
Fix from $1,600 2024-10-28
Pbootcms MEDIUM 6.1
CVE-2024-1018

A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file /admin.php?p=/Area/i…

No fix yet
Fix from $1,600 2024-01-29
Pbootcms HIGH 7.5
CVE-2023-50082

Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage…

No fix yet
Fix from $1,950 2024-01-04
Pbootcms CRITICAL 9.8
CVE-2023-39834

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.

Fix: 3.2.0+
Fix from $2,300 2023-08-24
Pbootcms CRITICAL 9.8
CVE-2021-37497

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.

No fix yet
Fix from $2,300 2023-02-03
Pbootcms CRITICAL 9.8
CVE-2022-32417EPSS 34%

PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.

No fix yet
Fix from $2,300 2022-07-14
Pbootcms HIGH 8.8
CVE-2020-20971

Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.

No fix yet
Fix from $1,950 2022-06-02
Pbootcms MEDIUM 6.5
CVE-2020-22535

Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php.

No fix yet
Fix from $1,600 2021-07-09
Pbootcms CRITICAL 9.8
CVE-2020-23580

Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board.

No fix yet
Fix from $2,300 2021-07-08
Pbootcms HIGH 7.5
CVE-2021-28245

PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding…

No fix yet
Fix from $1,950 2021-03-31
Pbootcms MEDIUM 6.5
CVE-2020-17901

Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.

No fix yet
Fix from $1,600 2020-11-30
Pbootcms CRITICAL 9.8
CVE-2018-16356

An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter.

No fix yet
Fix from $2,300 2020-03-02
Pbootcms CRITICAL 9.8
CVE-2018-16357

An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter.

No fix yet
Fix from $2,300 2020-03-02
Pbootcms HIGH 7.2
CVE-2019-8422

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php.

No fix yet
Fix from $1,950 2019-02-17
Pbootcms MEDIUM 6.5
CVE-2019-7570

A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI.

No fix yet
Fix from $1,600 2019-02-07
Pbootcms CRITICAL 9.8
CVE-2018-19893

SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string.

No fix yet
Fix from $2,300 2018-12-06
Pbootcms CRITICAL 9.8
CVE-2018-19595

PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of "eval" with mixed case, as demonstrated by an index.php…

No fix yet
Fix from $2,300 2018-11-27
Pbootcms HIGH 7.2
CVE-2018-19053

PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, foll…

No fix yet
Fix from $1,950 2018-11-07
Pbootcms CRITICAL 9.8
CVE-2018-18450

apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to …

Fix: 1.3.0+
Fix from $2,300 2018-10-17
Pbootcms HIGH 8.1
CVE-2018-18211

PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.

No fix yet
Fix from $1,950 2018-10-10
Pbootcms CRITICAL 9.8
CVE-2018-11369

An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controll…

No fix yet
Fix from $2,300 2018-05-22
Pbootcms HIGH 8.8
CVE-2018-11018

An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery (CSRF) vulnerability in apps/admin/controller/system/RoleController.php allows…

No fix yet
Fix from $1,950 2018-05-13
Pbootcms CRITICAL 9.8
CVE-2018-10133

PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel functi…

No fix yet
Fix from $2,300 2018-04-16