https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15154.htmlhttps://patchthecve.com/cve/CVE-2025-15154.htmlTue, 13 Oct 2026 09:10:00 +0000MEDIUM 5.3: A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiatehttps://patchthecve.com/cve/CVE-2025-15153.htmlhttps://patchthecve.com/cve/CVE-2025-15153.htmlTue, 13 Oct 2026 09:10:00 +0000LOW 3.7: A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible to launch the attack remotely. Attacks of this nature are highhttps://patchthecve.com/cve/CVE-2025-46109.htmlhttps://patchthecve.com/cve/CVE-2025-46109.htmlWed, 17 Jun 2026 09:25:56 +0000HIGH 8.8: SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET requesthttps://patchthecve.com/cve/CVE-2025-3787.htmlhttps://patchthecve.com/cve/CVE-2025-3787.htmlWed, 17 Jun 2026 09:20:40 +0000LOW 2.7: A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and mahttps://patchthecve.com/cve/CVE-2025-29389.htmlhttps://patchthecve.com/cve/CVE-2025-29389.htmlWed, 17 Jun 2026 09:05:20 +0000MEDIUM 6.1: PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2.https://patchthecve.com/cve/CVE-2020-19248.htmlhttps://patchthecve.com/cve/CVE-2020-19248.htmlWed, 17 Jun 2026 02:59:41 +0000MEDIUM 5.1: SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates.https://patchthecve.com/cve/CVE-2024-12793.htmlhttps://patchthecve.com/cve/CVE-2024-12793.htmlWed, 17 Jun 2026 07:00:30 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is some unknown functionality of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to path traversal. The attack may be launched remotely. https://patchthecve.com/cve/CVE-2024-12789.htmlhttps://patchthecve.com/cve/CVE-2024-12789.htmlWed, 17 Jun 2026 07:00:29 +0000MEDIUM 6.3: A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to code injection. It is possible to initiate the attack remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2024-42930.htmlhttps://patchthecve.com/cve/CVE-2024-42930.htmlWed, 17 Jun 2026 07:50:08 +0000MEDIUM 6.1: PbootCMS 3.2.8 is vulnerable to URL Redirect.