Description (CNA)
A flaw has been found in PbootCMS up to 3.2.12. Affected by this issue is some unknown functionality of the file apps/admin/controller/system/UserController.php of the component Backend. Executing a manipulation of the argument Field can lead to improper access controls. The attack may be performed from remote. The exploit has been published and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / PbootCMS | affected 3.2.0; affected 3.2.1; affected 3.2.2; affected 3.2.3; affected 3.2.4; affected 3.2.5; affected 3.2.6; affected 3.2.7; affected 3.2.8; affected 3.2.9; affected 3.2.10; affected 3.2.11; affected 3.2.12 |
CWE
CWE-284, CWE-266
References
- https://vuldb.com/?id.352079
- https://vuldb.com/?ctiid.352079
- https://vuldb.com/?submit.773907
- https://github.com/zzj-create/cvetest/blob/main/VULN-06_BACKEND_ARBITRARY_FIELD_MODIFICATION_REPORT_EN.md#vuln-06-pbootcms-3212-backend-arbitrary-field-modification
ADP enrichment
No English description supplied.
No references supplied.