Vulnerability Details CVE-2020-19248
SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.2%
CVSS Severity
CVSS v3 Score 5.1
References
Products affected by CVE-2020-19248
-
cpe:2.3:a:pbootcms:pbootcms:-
-
cpe:2.3:a:pbootcms:pbootcms:0.9.8
-
cpe:2.3:a:pbootcms:pbootcms:1.0.0
-
cpe:2.3:a:pbootcms:pbootcms:1.0.1
-
cpe:2.3:a:pbootcms:pbootcms:1.0.2
-
cpe:2.3:a:pbootcms:pbootcms:1.0.3
-
cpe:2.3:a:pbootcms:pbootcms:1.0.4
-
cpe:2.3:a:pbootcms:pbootcms:1.0.5
-
cpe:2.3:a:pbootcms:pbootcms:1.0.6
-
cpe:2.3:a:pbootcms:pbootcms:1.0.7
-
cpe:2.3:a:pbootcms:pbootcms:1.0.8
-
cpe:2.3:a:pbootcms:pbootcms:1.0.9
-
cpe:2.3:a:pbootcms:pbootcms:1.1.0
-
cpe:2.3:a:pbootcms:pbootcms:1.1.1
-
cpe:2.3:a:pbootcms:pbootcms:1.1.2
-
cpe:2.3:a:pbootcms:pbootcms:1.1.3
-
cpe:2.3:a:pbootcms:pbootcms:1.1.4
-
cpe:2.3:a:pbootcms:pbootcms:1.1.5
-
cpe:2.3:a:pbootcms:pbootcms:1.1.6
-
cpe:2.3:a:pbootcms:pbootcms:1.1.7
-
cpe:2.3:a:pbootcms:pbootcms:1.1.8
-
cpe:2.3:a:pbootcms:pbootcms:1.1.9
-
cpe:2.3:a:pbootcms:pbootcms:1.2.0
-
cpe:2.3:a:pbootcms:pbootcms:1.2.1
-
cpe:2.3:a:pbootcms:pbootcms:1.2.2
-
cpe:2.3:a:pbootcms:pbootcms:1.3.0
-
cpe:2.3:a:pbootcms:pbootcms:1.3.1
-
cpe:2.3:a:pbootcms:pbootcms:1.3.2
-
cpe:2.3:a:pbootcms:pbootcms:1.3.3
-
cpe:2.3:a:pbootcms:pbootcms:1.3.4
-
cpe:2.3:a:pbootcms:pbootcms:1.3.5
-
cpe:2.3:a:pbootcms:pbootcms:1.3.6
-
cpe:2.3:a:pbootcms:pbootcms:1.3.7
-
cpe:2.3:a:pbootcms:pbootcms:1.3.8
-
cpe:2.3:a:pbootcms:pbootcms:1.3.9
-
cpe:2.3:a:pbootcms:pbootcms:1.4.0
-
cpe:2.3:a:pbootcms:pbootcms:1.4.1