Description

SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates.

INFO

Published Date :

2025-02-21T00:00:00.000Z

Last Modified :

2025-02-21T21:08:09.646Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2020-19248 vulnerability.

Vendors Products
Pbootcms
  • Pbootcms

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact