CVE-2020-19248: SQL Injection
SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-19248?
CVE-2020-19248 is classified as a high-severity SQL Injection vulnerability.
How do I fix CVE-2020-19248?
To fix CVE-2020-19248, update to PbootCMS version 1.4.2 or later, which addresses the SQL Injection issue.
What type of systems are affected by CVE-2020-19248?
CVE-2020-19248 affects systems running PbootCMS version 1.4.1.
How can an attacker exploit CVE-2020-19248?
An attacker can exploit CVE-2020-19248 by manipulating input data to execute malicious SQL queries through the template parsing functionality.
What are the potential impacts of exploiting CVE-2020-19248?
Exploiting CVE-2020-19248 can lead to unauthorized access to database contents or manipulation of stored data.