Pbootcms vulnerabilities

Products

• Pbootcms 36

Newest

• pbootcms PbootCMS Header handle.php get_user_ip less trusted source CVE-2025-15154 6.9 MediumDecember 28, 2025
• pbootcms PbootCMS SQLite Database pbootcms.db file access CVE-2025-15153 6.3 MediumDecember 28, 2025
• pbootcms SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain... CVE-2025-46109 8.8 HighJune 18, 2025
• pbootcms PbootCMS Image server-side request forgery CVE-2025-3787 5.1 MediumApril 18, 2025
• pbootcms PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2. CVE-2025-29389 6.1 MediumApril 9, 2025
• pbootcms SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in... CVE-2020-19248 5.1 MediumFebruary 21, 2025
• pbootcms PbootCMS IndexController.php path traversal CVE-2024-12793 5.3 MediumDecember 19, 2024
• pbootcms PbootCMS IndexController.php code injection CVE-2024-12789 5.3 MediumDecember 19, 2024
• pbootcms PbootCMS 3.2.8 is vulnerable to URL Redirect. CVE-2024-42930 6.1 MediumOctober 28, 2024
• pbootcms PbootCMS cross site scripting CVE-2024-1018 2.4 LowJanuary 29, 2024
• pbootcms Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote... CVE-2023-50082 7.5 HighJanuary 4, 2024
• pbootcms PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via... CVE-2023-39834 9.8 CriticalAugust 24, 2023
• pbootcms SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary... CVE-2021-37497 9.8 CriticalFebruary 3, 2023
• pbootcms PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the... CVE-2022-32417 EPSS 35.2% 9.8 CriticalJuly 14, 2022
• pbootcms Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index. CVE-2020-20971 8.8 HighJune 1, 2022
• pbootcms Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the... CVE-2020-18456 4.8 MediumAugust 12, 2021
• pbootcms Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update... CVE-2020-22535 6.5 MediumJuly 9, 2021
• pbootcms Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board. CVE-2020-23580 9.8 CriticalJuly 8, 2021
• pbootcms Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php. CVE-2020-20363 4.8 MediumJuly 8, 2021
• pbootcms Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php. CVE-2020-21003 4.8 MediumJune 3, 2021
• pbootcms PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter... CVE-2021-28245 7.5 HighMarch 31, 2021
• pbootcms Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a... CVE-2020-17901 6.5 MediumNovember 30, 2020
• pbootcms An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order... CVE-2018-16357 9.8 CriticalMarch 2, 2020
• pbootcms An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order... CVE-2018-16356 9.8 CriticalMarch 2, 2020
• pbootcms PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and... CVE-2019-17417 4.8 MediumOctober 9, 2019
• pbootcms A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps... CVE-2019-8422 7.2 HighFebruary 17, 2019
• pbootcms A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del... CVE-2019-7570 6.5 MediumFebruary 7, 2019
• pbootcms SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html... CVE-2018-19893 9.8 CriticalDecember 6, 2018
• pbootcms PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of ... CVE-2018-19595 9.8 CriticalNovember 27, 2018
• pbootcms PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php... CVE-2018-19053 7.2 HighNovember 7, 2018
• pbootcms apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has... CVE-2018-18450 9.8 CriticalOctober 17, 2018
• pbootcms PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI. CVE-2018-18211 8.1 HighOctober 10, 2018
• pbootcms An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important... CVE-2018-11369 9.8 CriticalMay 22, 2018
• pbootcms An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery (CSRF) vulnerability in... CVE-2018-11018 8.8 HighMay 13, 2018
• pbootcms PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php... CVE-2018-10133 9.8 CriticalApril 16, 2018
• pbootcms PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request,... CVE-2018-10132 8.8 HighApril 16, 2018