2 results (0.014 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function. • https://github.com/Pbootcms/Pbootcms/issues/8 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI. Se ha detectado una vulnerabilidad Cross-Site Request Forgery (CSRF) en PbootCMS v1.3.6 que puede eliminar usuarios mediante un URI admin.php/User/del/ucode/. • https://blog.csdn.net/yangfan0502/article/details/86189065 • CWE-352: Cross-Site Request Forgery (CSRF) •