İçeriğe atla
Noroxi

pbootcms kayıtları

pbootcms üreticisine ait 36 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%5,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

36 kayıt
  • CVE-2022-32417
    50Planlayın

    PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.

    KritikCVSS 9,8İstismar yokEPSS %36

    pbootcms · pbootcms14 Tem 2022

  • CVE-2018-19595
    40Planlayın

    PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of "eval" with mixed case, as demonstrated by an

    KritikCVSS 9,8İstismar yokEPSS %4

    pbootcms · pbootcms27 Kas 2018

  • CVE-2020-23580
    40Planlayın

    Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board.

    KritikCVSS 9,8İstismar yokEPSS %2

    pbootcms · pbootcms8 Tem 2021

  • CVE-2023-39834
    40Planlayın

    PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.

    KritikCVSS 9,8İstismar yokEPSS %2

    pbootcms · pbootcms24 Ağu 2023

  • CVE-2018-16357
    40Planlayın

    An issue was discovered in PbootCMS.

    KritikCVSS 9,8İstismar yokEPSS %2

    pbootcms · pbootcms2 Mar 2020

  • CVE-2018-16356
    40Planlayın

    An issue was discovered in PbootCMS.

    KritikCVSS 9,8İstismar yokEPSS %2

    pbootcms · pbootcms2 Mar 2020

  • CVE-2018-18450
    39İzleyin

    apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST

    KritikCVSS 9,8İstismar yokEPSS %2

    pbootcms · pbootcms17 Eki 2018

  • CVE-2018-10133
    39İzleyin

    PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLab

    KritikCVSS 9,8İstismar yokEPSS %1

    pbootcms · pbootcms16 Nis 2018

  • CVE-2021-37497
    39İzleyin

    SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.

    KritikCVSS 9,8İstismar yokEPSS %1

    pbootcms · pbootcms3 Şub 2023

  • CVE-2018-19893
    39İzleyin

    SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string.

    KritikCVSS 9,8İstismar yokEPSS %1

    pbootcms · pbootcms5 Ara 2018

  • CVE-2018-11369
    39İzleyin

    An issue was discovered in PbootCMS v1.0.9.

    KritikCVSS 9,8İstismar yokEPSS %1

    pbootcms · pbootcms22 May 2018

  • CVE-2018-11018
    35İzleyin

    An issue was discovered in PbootCMS v1.0.7.

    YüksekCVSS 8,8İstismar yokEPSS %1

    pbootcms · pbootcms13 May 2018

  • CVE-2020-20971
    35İzleyin

    Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.

    YüksekCVSS 8,8İstismar yokEPSS %1

    pbootcms · pbootcms2 Haz 2022

  • CVE-2018-10132
    35İzleyin

    PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the reconten

    YüksekCVSS 8,8İstismar yokEPSS %1

    pbootcms · pbootcms16 Nis 2018

  • CVE-2025-46109
    35İzleyin

    SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET requ

    YüksekCVSS 8,8İstismar yokEPSS %0

    pbootcms · pbootcms18 Haz 2025

  • CVE-2018-18211
    32İzleyin

    PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.

    YüksekCVSS 8,1İstismar yokEPSS %1

    pbootcms · pbootcms10 Eki 2018

  • CVE-2021-28245
    30İzleyin

    PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information throu

    YüksekCVSS 7,5İstismar yokEPSS %1

    pbootcms · pbootcms31 Mar 2021

  • CVE-2023-50082
    30İzleyin

    Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via sessio

    YüksekCVSS 7,5İstismar yokEPSS %1

    pbootcms · pbootcms4 Oca 2024

  • CVE-2018-19053
    28İzleyin

    PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statem

    YüksekCVSS 7,2İstismar yokEPSS %1

    pbootcms · pbootcms7 Kas 2018

  • CVE-2019-8422
    28İzleyin

    A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php

    YüksekCVSS 7,2İstismar yokEPSS %1

    pbootcms · pbootcms17 Şub 2019

  • CVE-2020-22535
    26İzleyin

    Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php.

    OrtaCVSS 6,5İstismar yokEPSS %1

    pbootcms · pbootcms9 Tem 2021

  • CVE-2019-7570
    26İzleyin

    A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI.

    OrtaCVSS 6,5İstismar yokEPSS %1

    pbootcms · pbootcms7 Şub 2019

  • CVE-2020-17901
    26İzleyin

    Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.

    OrtaCVSS 6,5İstismar yokEPSS %0

    pbootcms · pbootcms30 Kas 2020

  • CVE-2024-1018
    24İzleyin

    PbootCMS cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    pbootcms · pbootcms29 Oca 2024

  • CVE-2024-42930
    24İzleyin

    PbootCMS 3.2.8 is vulnerable to URL Redirect.

    OrtaCVSS 6,1İstismar yokEPSS %0

    pbootcms · pbootcms28 Eki 2024