SQL Injection Vulnerability in PbootCMS by PbootCMS Team
CVE-2019-8422

7.2HIGH

Key Information:

Vendor

Pbootcms

Status
Pbootcms
Vendor
CVE Published:
17 February 2019

What is CVE-2019-8422?

A significant SQL Injection vulnerability has been identified in PbootCMS version 1.3.2. This flaw exists in the description parameter within the ContentController.php file, allowing attackers to execute arbitrary SQL commands through crafted input. If exploited, this vulnerability could lead to unauthorized data access, manipulation, or even complete system compromise. It is essential for users of PbootCMS to apply the latest security patches to mitigate this risk.

References

https://github.com/wowwooo/vnotes/blob/master/PbootCMS%20...
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.