CVE Catalog
CVE-2023-39834
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk1.80%
76th percentile - higher than 76% of all known CVEs
Summary
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.
Risk Assessment
This vulnerability may allow attackers to execute arbitrary system commands, posing a significant security risk to the application.
Recommendation
It is recommended to upgrade PbootCMS to version 3.2.0 or later to mitigate this vulnerability.
Original NVD description (English source)
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.