NetSight
critical9.8

CVE-2021-37497

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.

Impact

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.

Affected products

VendorProductAffected versions
PbootcmsPbootcms
Version 3.0.5

Weakness classification

References