PT-2018-10527
CVE-2018-11369
·
تاريخ النشر
2018-05-22
·
تاريخ التحديث
2018-06-22
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PbootCMS version 1.0.9
Description
A SQL Injection issue allows attackers to obtain important information from the database via the
scode parameter in the appshomecontrollerParserController.php file.Recommendations
For PbootCMS version 1.0.9, avoid using the
scode parameter in the ParserController.php file until a patch is available. As a temporary workaround, consider restricting access to the ParserController.php file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾