Vulnerabilities
Summary — last 7 days
New vulnerabilities3,454▼ 1,360 vs. last week
Critical / high1,321▼ 1,441 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)693▲ 630 vs. last week
More filters
12 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.8) | 0.73% | — | PbootcmsAI | 8/17/2026 | 8/31/2026 | An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components | |
| Modified | Critical (9.8) | 2.1% | — | Pbootcms | 8/24/2023 | 6/17/2026 | PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function. | |
| Modified | Critical (9.8) | 1.2% | — | Pbootcms | 2/3/2023 | 6/17/2026 | SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request. | |
| Modified | Critical (9.8) | 35% | — | Pbootcms | 7/14/2022 | 6/17/2026 | PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php. | |
| Modified | Critical (9.8) | 2.5% | — | Pbootcms | 7/8/2021 | 6/17/2026 | Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board. | |
| Modified | Critical (9.8) | 1.8% | — | Pbootcms | 3/2/2020 | 6/17/2026 | An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter. | |
| Modified | Critical (9.8) | 1.8% | — | Pbootcms | 3/2/2020 | 6/17/2026 | An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter. | |
| Modified | Critical (9.8) | 1.1% | — | Pbootcms | 12/6/2018 | 6/17/2026 | SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string. | |
| Modified | Critical (9.8) | 3.9% | — | Pbootcms | 11/27/2018 | 6/17/2026 | PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of "eval" with mixed case, as demonstrated by an index.php/list/5/?current={pboot:if(evAl($_GET[a]))}1{/pboot:if}&a=phpinfo(); URI, because of an incorrect apps\home\controller\ParserController.php parserIfLabel protection… | |
| Modified | Critical (9.8) | 1.5% | — | Pbootcms | 10/17/2018 | 6/17/2026 | apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI. | |
| Modified | Critical (9.8) | 1.1% | — | Pbootcms | 5/22/2018 | 6/17/2026 | An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter. | |
| Modified | Critical (9.8) | 1.4% | — | Pbootcms | 4/16/2018 | 6/17/2026 | PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel function in \apps\home\controller\ParserController.php. |