CVE-2018-11369: Pbootcms

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter.

Affected products

• Pbootcms Pbootcms: version 1.0.9 only

Published 2018-05-22. Last modified 2026-06-17.