CVE-2026-4508: PbootCMS Member Login MemberController.php checkUsername sql injection
A vulnerability was identified in PbootCMS up to 3.2.12. The impacted element is the function checkUsername of the file apps/home/controller/MemberController.php of the component Member Login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4508?
CVE-2026-4508 is classified as a high-severity SQL injection vulnerability.
How do I fix CVE-2026-4508?
To fix CVE-2026-4508, update PbootCMS to version 3.2.13 or later.
What impact does CVE-2026-4508 have on affected systems?
CVE-2026-4508 allows attackers to execute arbitrary SQL statements, potentially compromising database security.
Is CVE-2026-4508 specific to certain versions of PbootCMS?
Yes, CVE-2026-4508 affects PbootCMS versions up to and including 3.2.12.
What component of PbootCMS is affected by CVE-2026-4508?
CVE-2026-4508 specifically impacts the Member Login component, particularly the checkUsername function in MemberController.php.