Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2018-10133

Disclosure Date: April 16, 2018 (last updated November 26, 2024)
PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel function in \apps\home\controller\ParserController.php.
0
0
Attacker Value
Unknown

CVE-2018-10132

Disclosure Date: April 16, 2018 (last updated November 26, 2024)
PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the recontent parameter.
0
0