Browse CVEs

MEDIUM 6.5 CVE-2025-3787 A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. T… Pbootcms No fix yet Fix from $1,6002025-04-18 MEDIUM 6.1 CVE-2025-29389 PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2. Pbootcms No fix yet Fix from $1,6002025-04-09 MEDIUM 6.1 CVE-2024-42930 PbootCMS 3.2.8 is vulnerable to URL Redirect. Pbootcms Mitigation only Fix from $1,6002024-10-28 MEDIUM 6.1 CVE-2024-1018 A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file /admin.php?p=/Area/i… Pbootcms No fix yet Fix from $1,6002024-01-29 HIGH 7.5 CVE-2023-50082 Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage… Pbootcms No fix yet Fix from $1,9502024-01-04 CRITICAL 9.8 CVE-2021-37497 SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request. Pbootcms No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2022-32417EPSS 34% PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php. Pbootcms No fix yet Fix from $2,3002022-07-14 HIGH 8.8 CVE-2020-20971 Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index. Pbootcms No fix yet Fix from $1,9502022-06-02 MEDIUM 6.5 CVE-2020-22535 Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php. Pbootcms No fix yet Fix from $1,6002021-07-09 CRITICAL 9.8 CVE-2020-23580 Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board. Pbootcms No fix yet Fix from $2,3002021-07-08 HIGH 7.5 CVE-2021-28245 PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding… Pbootcms No fix yet Fix from $1,9502021-03-31 MEDIUM 6.5 CVE-2020-17901 Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user. Pbootcms No fix yet Fix from $1,6002020-11-30 CRITICAL 9.8 CVE-2018-16356 An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter. Pbootcms No fix yet Fix from $2,3002020-03-02 CRITICAL 9.8 CVE-2018-16357 An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter. Pbootcms No fix yet Fix from $2,3002020-03-02 HIGH 7.2 CVE-2019-8422 A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php. Pbootcms No fix yet Fix from $1,9502019-02-17 MEDIUM 6.5 CVE-2019-7570 A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI. Pbootcms No fix yet Fix from $1,6002019-02-07 CRITICAL 9.8 CVE-2018-19893 SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string. Pbootcms No fix yet Fix from $2,3002018-12-06 CRITICAL 9.8 CVE-2018-19595 PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of "eval" with mixed case, as demonstrated by an index.php… Pbootcms No fix yet Fix from $2,3002018-11-27 HIGH 7.2 CVE-2018-19053 PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, foll… Pbootcms No fix yet Fix from $1,9502018-11-07 HIGH 8.1 CVE-2018-18211 PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI. Pbootcms No fix yet Fix from $1,9502018-10-10 CRITICAL 9.8 CVE-2018-11369 An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controll… Pbootcms No fix yet Fix from $2,3002018-05-22 HIGH 8.8 CVE-2018-11018 An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery (CSRF) vulnerability in apps/admin/controller/system/RoleController.php allows… Pbootcms No fix yet Fix from $1,9502018-05-13 CRITICAL 9.8 CVE-2018-10133 PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel functi… Pbootcms No fix yet Fix from $2,3002018-04-16 HIGH 8.8 CVE-2018-10132 PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the recontent paramet… Pbootcms No fix yet Fix from $1,9502018-04-16