Code Injection Vulnerability in PbootCMS Affects Multiple Versions

CVE-2024-12789

What is CVE-2024-12789?

CVE-2024-12789 is a critical vulnerability found in PbootCMS versions up to 3.2.3, specifically affecting the file apps/home/controller/IndexController.php. This vulnerability facilitates remote code injection due to improper handling of the argument 'tag', thereby enabling attackers to execute arbitrary code on the server. Attackers can exploit this vulnerability from a remote location, posing significant risks to the integrity and security of affected systems. To mitigate this vulnerability, it is imperative for users to upgrade to version 3.2.4 or later, which addresses the issue effectively.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References