VYPR
Critical severity9.8NVD Advisory· Published Oct 17, 2018· Updated Jun 17, 2026

CVE-2018-18450

CVE-2018-18450

Description

apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI.

Affected products

3
  • Pbootcmspro/Pbootcmsinferred3 versions
    < 1.3.0+ 2 more
    • (no CPE)range: < 1.3.0
    • cpe:2.3:a:pbootcms:pbootcms:*:*:*:*:*:*:*:*range: <1.3.0
    • (no CPE)range: <1.3.0 build 2018-11-12

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.