VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 17, 2018· Updated Jun 17, 2026

CVE-2018-18450

CVE-2018-18450

Description

apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI.

Affected products

2
  • Pbootcmspro/Pbootcmsinferred2 versions
    < 1.3.0+ 1 more
    • (no CPE)range: < 1.3.0
    • (no CPE)range: <1.3.0 build 2018-11-12

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.