PT-2023-27125 · Pbootcms · Pbootcms

Boogipopo · Publicado 2023-08-24 · Atualizado 2023-08-29 · CVE-2023-39834

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PbootCMS versions prior to 3.2.0

Description A command injection issue was discovered via the create function, allowing for potential exploitation.

Recommendations For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2023-39834

Produtos afetados

Pbootcms

Referências · 5

• 🔥 https://github.com/Pbootcms/Pbootcms/issues/8 · Exploit
• https://osv.dev/vulnerability/CVE-2023-39834 · Aviso do Fabricante
• https://t.me/cibsecurity/69149 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-39834 · Nota de Segurança
• https://t.me/cvenotify/57213 · Publicação no Telegram