CVE-2018-19053

PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, followed by a SELECT statement containing this PHP code.
References
Link Resource
https://github.com/Pbootcms/Pbootcms/issues/2 Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:pbootcms:pbootcms:1.2.2:*:*:*:*:*:*:*

Information

Published : 2018-11-06 21:29

Updated : 2018-12-12 11:52


NVD link : CVE-2018-19053

Mitre link : CVE-2018-19053


JSON object : View

CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')

Advertisement

dedicated server usa

Products Affected

pbootcms

  • pbootcms