Pbootcms

Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.

1. PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.CVE-2022-32417Pbootcms · 35% likely

   CWE-94

2. PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of "eval" with mixed case, as demonstrated by an index.php/list/5/?current={pboot:if(evA…CVE-2018-19595Pbootcms · 3.9% likely

   CWE-94

3. Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board.CVE-2020-23580Pbootcms · 2.5% likely
4. PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.CVE-2023-39834Pbootcms · 2.1% likely

   CWE-77

5. An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter.CVE-2018-16357Pbootcms · 1.8% likely

   CWE-89

6. An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter.CVE-2018-16356Pbootcms · 1.8% likely

   CWE-89

7. apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode…CVE-2018-18450Pbootcms · 1.5% likely

   CWE-89

8. PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, followed by a SELECT statement con…CVE-2018-19053Pbootcms · 1.4% likely

   CWE-94

9. PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel function in \apps\home\controller\Pa…CVE-2018-10133Pbootcms · 1.4% likely

   CWE-94

10. A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php.CVE-2019-8422Pbootcms · 1.3% likely

    CWE-89

11. SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.CVE-2021-37497Pbootcms · CVSS 9.8 · 1.2% likely

    CWE-89

12. PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account.CVE-2021-28245Pbootcms · 1.2% likely

    CWE-89

13. SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string.CVE-2018-19893Pbootcms · 1.1% likely

    CWE-89

14. An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode…CVE-2018-11369Pbootcms · 1.1% likely

    CWE-89

15. PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.CVE-2018-18211Pbootcms · 0.9% likely

    CWE-89

16. Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php.CVE-2020-22535Pbootcms · 0.8% likely

    CWE-668

17. PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs.CVE-2019-17417Pbootcms · 0.6% likely

    CWE-79

18. Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid loggin…CVE-2023-50082Pbootcms · CVSS 7.5 · 0.6% likely
19. An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery (CSRF) vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add admin…CVE-2018-11018Pbootcms · 0.6% likely

    CWE-352

20. Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.CVE-2020-20363Pbootcms · 0.6% likely

    CWE-79

21. PbootCMS IndexController.php code injectionCVE-2024-12789Pbootcms · CVSS 6.3 · 0.6% likely

    CWE-94

22. A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI.CVE-2019-7570Pbootcms · 0.5% likely

    CWE-352

23. Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.CVE-2020-20971Pbootcms · 0.5% likely

    CWE-352

24. Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php.CVE-2020-18456Pbootcms · 0.5% likely

    CWE-79

25. PbootCMS SQLite Database pbootcms.db file accessCVE-2025-15153Pbootcms · CVSS 3.7 · 0.5% likely

    CWE-552

26. PbootCMS cross site scriptingCVE-2024-1018Pbootcms · CVSS 2.4 · 0.5% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.