Vulnerabilities > Pbootcms > Pbootcms > 1.2.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-24 | CVE-2023-39834 | Command Injection vulnerability in Pbootcms PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function. | 9.8 |
| 2018-12-06 | CVE-2018-19893 | SQL Injection vulnerability in Pbootcms 1.2.1 SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string. | 7.5 |
| 2018-10-17 | CVE-2018-18450 | SQL Injection vulnerability in Pbootcms apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI. | 7.5 |
| 2018-10-10 | CVE-2018-18211 | SQL Injection vulnerability in Pbootcms 1.2.1 PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI. | 6.8 |