Pbootcms - vulnerabilities (CVEs)

43 CVEs in 1 products, 0 in the last 30 days, newest from 2026-09-16.

Products

• Pbootcms - 43 CVEs

Newest CVEs of Pbootcms

• CVE-2026-92383 - CVSS 5.3 (medium), 2026-09-16: A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the…
• CVE-2026-92381 - CVSS 5.1 (medium), 2026-09-16: A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decode_string of the file…
• CVE-2026-12066 - CVSS 7.3 (high), 2026-06-12: A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file…
• CVE-2026-4514 - CVSS 6.3 (medium), 2026-03-21: A flaw has been found in PbootCMS up to 3.2.12. Affected by this issue is some unknown functionality of the file…
• CVE-2026-4510 - CVSS 5.3 (medium), 2026-03-21: A weakness has been identified in PbootCMS up to 3.2.12. This impacts the function alert_location of the file apps/home/controller/MemberController.php of the…
• CVE-2026-4509 - CVSS 6.3 (medium), 2026-03-21: A security flaw has been discovered in PbootCMS up to 3.2.12. This affects an unknown function of the file core/function/file.php of the component File…
• CVE-2026-4508 - CVSS 7.3 (high), 2026-03-20: A vulnerability was identified in PbootCMS up to 3.2.12. The impacted element is the function checkUsername of the file…
• CVE-2025-15154 - CVSS 6.9 (medium), 2025-12-28: A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of…
• CVE-2025-15153 - CVSS 6.3 (medium), 2025-12-28: A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database.…
• CVE-2025-46109 - CVSS 8.8 (high), 2025-06-18: SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET request
• CVE-2025-3787 - CVSS 6.5 (medium), 2025-04-18: A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. The…
• CVE-2025-29389 - CVSS 6.1 (medium), 2025-04-09: PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2.
• CVE-2020-19248 - CVSS 5.1 (medium), 2025-02-21: SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content…
• CVE-2024-12793 - CVSS 5.3 (medium), 2024-12-19: A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is some unknown functionality of the file…
• CVE-2024-12789 - CVSS 9.8 (critical), 2024-12-19: A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file…
• CVE-2024-42930 - CVSS 6.1 (medium), 2024-10-28: PbootCMS 3.2.8 is vulnerable to URL Redirect.
• CVE-2024-1018 - CVSS 6.1 (medium), 2024-01-29: A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file…
• CVE-2023-50082 - CVSS 7.5 (high), 2024-01-04: Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a…
• CVE-2023-39834 - CVSS 9.8 (critical), 2023-08-24: PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.
• CVE-2021-37497 - CVSS 9.8 (critical), 2023-02-03: SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.
• CVE-2022-32417 - CVSS 9.8 (critical), 2022-07-14: PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.
• CVE-2020-20971 - CVSS 8.8 (high), 2022-06-02: Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.
• CVE-2020-18456 - CVSS 4.8 (medium), 2021-08-12: Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php.
• CVE-2020-22535 - CVSS 6.5 (medium), 2021-07-09: Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php.
• CVE-2020-23580 - CVSS 9.8 (critical), 2021-07-08: Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board.
• CVE-2020-20363 - CVSS 4.8 (medium), 2021-07-08: Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.
• CVE-2020-21003 - CVSS 4.8 (medium), 2021-06-03: Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php.
• CVE-2021-28245 - CVSS 7.5 (high), 2021-03-31: PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin…
• CVE-2020-17901 - CVSS 6.5 (medium), 2020-11-30: Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.
• CVE-2018-16356 - CVSS 9.8 (critical), 2020-03-02: An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter.