pbootcms

Top products

The 15 most recently published vulnerabilities affecting pbootcms.

• CVE-2025-15154PbootCMS Header handle.php get_user_ip less trusted source5.3Dec 28, 2025
• CVE-2025-15153PbootCMS SQLite Database pbootcms.db file access3.7Dec 28, 2025
• CVE-2025-46109SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET request8.8Jun 18, 2025
• CVE-2025-3787PbootCMS Image server-side request forgery2.7Apr 18, 2025
• CVE-2025-29389PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2.6.1Apr 9, 2025
• CVE-2020-19248SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs...5.1Feb 21, 2025
• CVE-2024-12793PbootCMS IndexController.php path traversal4.3Dec 19, 2024
• CVE-2024-12789PbootCMS IndexController.php code injection6.3Dec 19, 2024
• CVE-2024-42930PbootCMS 3.2.8 is vulnerable to URL Redirect.6.1Oct 28, 2024
• CVE-2024-1018PbootCMS cross site scripting2.4Jan 29, 2024
• CVE-2023-50082Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend...7.5Jan 4, 2024
• CVE-2023-39834PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.9.8Aug 24, 2023
• CVE-2021-37497SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.9.8Feb 3, 2023
• CVE-2022-32417PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.9.8Jul 14, 2022
• CVE-2020-20971Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.8.8Jun 1, 2022