Pbootcms
by Pbootcmspro
Source repositories
CVEs (39)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-4508 | Hig | 0.40 | 7.3 | 0.00 | Mar 20, 2026 | A vulnerability was identified in PbootCMS up to 3.2.12. The impacted element is the function checkUsername of the file apps/home/controller/MemberController.php of the component Member Login. The manipulation of the argument Username leads to sql injection. The attack may be… | ||
| CVE-2026-4514 | Med | 0.34 | 6.3 | 0.00 | Mar 21, 2026 | A flaw has been found in PbootCMS up to 3.2.12. Affected by this issue is some unknown functionality of the file apps/admin/controller/system/UserController.php of the component Backend. Executing a manipulation of the argument Field can lead to improper access controls. The… | ||
| CVE-2026-4509 | Med | 0.34 | 6.3 | 0.00 | Mar 21, 2026 | A security flaw has been discovered in PbootCMS up to 3.2.12. This affects an unknown function of the file core/function/file.php of the component File Upload. The manipulation of the argument black results in incomplete blacklist. The attack may be launched remotely. The… | ||
| CVE-2020-18456 | Med | 0.31 | 4.8 | 0.01 | Aug 12, 2021 | Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php. | ||
| CVE-2020-20363 | Med | 0.31 | 4.8 | 0.01 | Jul 8, 2021 | Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php. | ||
| CVE-2020-21003 | Med | 0.31 | 4.8 | 0.00 | Jun 3, 2021 | Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php. | ||
| CVE-2019-17417 | Med | 0.31 | 4.8 | 0.01 | Oct 10, 2019 | PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs. | ||
| CVE-2026-36239 | Med | 0.28 | 4.3 | 0.00 | May 26, 2026 | PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality | ||
| CVE-2025-15153 | Low | 0.24 | 3.7 | 0.00 | Dec 28, 2025 | A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of… | ||
| CVE-2026-4510 | Med | 0.21 | 4.3 | 0.00 | Mar 21, 2026 | A weakness has been identified in PbootCMS up to 3.2.12. This impacts the function alert_location of the file apps/home/controller/MemberController.php of the component Parameter Handler. This manipulation of the argument backurl causes cross site scripting. Remote exploitation… | ||
| CVE-2024-1018 | Low | 0.16 | 2.4 | 0.01 | Jan 29, 2024 | A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file /admin.php?p=/Area/index#tab=t2. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely.… | ||
| CVE-2025-15154 | 0.00 | — | 0.00 | Dec 28, 2025 | A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The… | |||
| CVE-2025-46109 | 0.00 | — | 0.00 | Jun 18, 2025 | SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET request | |||
| CVE-2025-3787 | 0.00 | — | 0.00 | Apr 18, 2025 | A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed… | |||
| CVE-2025-29389 | 0.00 | — | 0.00 | Apr 9, 2025 | PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2. | |||
| CVE-2020-19248 | 0.00 | — | 0.00 | Feb 21, 2025 | SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse… | |||
| CVE-2024-12793 | 0.00 | — | 0.00 | Dec 19, 2024 | A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is some unknown functionality of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to path traversal. The attack may… | |||
| CVE-2024-12789 | 0.00 | — | 0.01 | Dec 19, 2024 | A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to code injection. It is possible to initiate the attack remotely.… | |||
| CVE-2024-42930 | 0.00 | — | 0.00 | Oct 28, 2024 | PbootCMS 3.2.8 is vulnerable to URL Redirect. |
- risk 0.40cvss 7.3epss 0.00
A vulnerability was identified in PbootCMS up to 3.2.12. The impacted element is the function checkUsername of the file apps/home/controller/MemberController.php of the component Member Login. The manipulation of the argument Username leads to sql injection. The attack may be…
- risk 0.34cvss 6.3epss 0.00
A flaw has been found in PbootCMS up to 3.2.12. Affected by this issue is some unknown functionality of the file apps/admin/controller/system/UserController.php of the component Backend. Executing a manipulation of the argument Field can lead to improper access controls. The…
- risk 0.34cvss 6.3epss 0.00
A security flaw has been discovered in PbootCMS up to 3.2.12. This affects an unknown function of the file core/function/file.php of the component File Upload. The manipulation of the argument black results in incomplete blacklist. The attack may be launched remotely. The…
- risk 0.31cvss 4.8epss 0.01
Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php.
- risk 0.31cvss 4.8epss 0.01
Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.
- risk 0.31cvss 4.8epss 0.00
Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php.
- risk 0.31cvss 4.8epss 0.01
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs.
- risk 0.28cvss 4.3epss 0.00
PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality
- risk 0.24cvss 3.7epss 0.00
A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of…
- risk 0.21cvss 4.3epss 0.00
A weakness has been identified in PbootCMS up to 3.2.12. This impacts the function alert_location of the file apps/home/controller/MemberController.php of the component Parameter Handler. This manipulation of the argument backurl causes cross site scripting. Remote exploitation…
- risk 0.16cvss 2.4epss 0.01
A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file /admin.php?p=/Area/index#tab=t2. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely.…
- CVE-2025-15154Dec 28, 2025risk 0.00cvss —epss 0.00
A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The…
- CVE-2025-46109Jun 18, 2025risk 0.00cvss —epss 0.00
SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET request
- CVE-2025-3787Apr 18, 2025risk 0.00cvss —epss 0.00
A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed…
- CVE-2025-29389Apr 9, 2025risk 0.00cvss —epss 0.00
PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2.
- CVE-2020-19248Feb 21, 2025risk 0.00cvss —epss 0.00
SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse…
- CVE-2024-12793Dec 19, 2024risk 0.00cvss —epss 0.00
A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is some unknown functionality of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to path traversal. The attack may…
- CVE-2024-12789Dec 19, 2024risk 0.00cvss —epss 0.01
A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to code injection. It is possible to initiate the attack remotely.…
- CVE-2024-42930Oct 28, 2024risk 0.00cvss —epss 0.00
PbootCMS 3.2.8 is vulnerable to URL Redirect.
Page 2 of 2