Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:pbootcms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductPbootcms (b8b11593-2740-562f-979d-047bd4169ecb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3787 vulnerable 2026-06-08 07:23:09.889013 PbootCMS Image server-side request forgery
LOW (2.7)
A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-18T09:31:04.227Z
Updated: 2025-04-18T11:59:41.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1018 vulnerable 2026-06-08 06:25:39.006329 PbootCMS cross site scripting
LOW (2.4)
A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file /admin.php?p=/Area/index#tab=t2. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252288.
Published: 2024-01-29T20:00:08.200Z
Updated: 2024-11-12T21:31:04.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12793 vulnerable 2026-06-08 06:25:36.115000 PbootCMS IndexController.php path traversal
MEDIUM (4.3)
A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is some unknown functionality of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.2.4 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2024-12-19T18:00:17.798Z
Updated: 2024-12-20T17:39:03.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12789 vulnerable 2026-06-08 06:25:36.105508 PbootCMS IndexController.php code injection
MEDIUM (6.3)
A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.4 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2024-12-19T16:31:06.205Z
Updated: 2024-12-20T17:19:50.397Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.