CVE-2020-22535 | Severity.io

Description

Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php.

Related CPE's

Vulnerable

References

ExploitIssue TrackingThird Party Advisory

ExploitIssue TrackingThird Party Advisory

Weaknesses

Primary

CWE-668

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.5 · Medium

Information

Source identifier

Vulnerability status

Modified

Published

2021-07-09T14:15:08.427Z

4 years ago

Last modified

2024-11-21T04:13:17.740Z

1 year ago