CVE-2018-19053

PoC —

CVSS 3.0

7.2 high

EPSS

1%p72

Published

Nov 7, 2018 (Nov 7, 2018)

Modified

Jun 17, 2026

Description

PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, followed by a SELECT statement containing this PHP code.

Vendors: pbootcms
Products: pbootcms
Weakness: CWE-94
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.