Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-19248

Description

SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates.

POC

Reference

- https://unh3x.github.io/2019/07/19/PbootCMSv1.4.1_Template_Injection/

Github

No PoCs found on GitHub currently.