An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter.
References
Link | Resource |
---|---|
https://gitee.com/hnaoyun/PbootCMS/issues/IJZ1E | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-05-22 08:29
Updated : 2018-06-22 06:48
NVD link : CVE-2018-11369
Mitre link : CVE-2018-11369
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
pbootcms
- pbootcms