SQL Injection

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter.CVE-2018-16357Pbootcms · 1.8% likely

   CWE-89

2. An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter.CVE-2018-16356Pbootcms · 1.8% likely

   CWE-89

3. apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode…CVE-2018-18450Pbootcms · 1.5% likely

   CWE-89

4. A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php.CVE-2019-8422Pbootcms · 1.3% likely

   CWE-89

5. SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.CVE-2021-37497Pbootcms · CVSS 9.8 · 1.2% likely

   CWE-89

6. PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account.CVE-2021-28245Pbootcms · 1.2% likely

   CWE-89

7. SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string.CVE-2018-19893Pbootcms · 1.1% likely

   CWE-89

8. An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode…CVE-2018-11369Pbootcms · 1.1% likely

   CWE-89

9. PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.CVE-2018-18211Pbootcms · 0.9% likely

   CWE-89

10. SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET requestCVE-2025-46109Pbootcms · CVSS 8.8 · 0.4% likely

    CWE-89

11. SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page…CVE-2020-19248Pbootcms · CVSS 5.1 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.