CVE-2023-39834
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk76th percentile - higher than 76% of all known CVEs
Summary
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.
Risk Assessment
This vulnerability may allow attackers to execute arbitrary system commands, posing a significant security risk to the application.
Recommendation
It is recommended to upgrade PbootCMS to version 3.2.0 or later to mitigate this vulnerability.
Other vulnerabilities in PbootCMS
See all- CVE-2026-67960Critical
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components.
- CVE-2026-36239Medium
PbootCMS version 3.2.11 contains a code injection vulnerability in its site configuration functionality.
- CVE-2020-20363Medium
A Cross-Site Scripting (XSS) vulnerability was found in PbootCMS version 2.0.3 in the admin.php file. It allows an attacker to inject malicious JavaScript code into the admin panel.
Original NVD description (English source)
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.