CVE-2018-11369: SQL Injection
First published: Tue May 22 2018(Updated: )
An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pbootcms Pbootcms | =1.0.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-11369?
CVE-2018-11369 is a SQL Injection vulnerability in PbootCMS v1.0.9.
How severe is CVE-2018-11369?
CVE-2018-11369 is classified as critical with a severity score of 9.8.
How can the SQL Injection vulnerability in PbootCMS v1.0.9 be exploited?
The vulnerability can be exploited by manipulating the 'scode' parameter in the ParserController.php file.
What is affected by CVE-2018-11369?
PbootCMS version 1.0.9 is affected by CVE-2018-11369.
Is there a fix available for CVE-2018-11369?
It is recommended to update PbootCMS to a version that does not contain the SQL Injection vulnerability.
- collector/nvd-index
- vendor/pbootcms
- canonical/pbootcms pbootcms
- version/pbootcms pbootcms/1.0.9