← Database

CVE-2026-79387

MEDIUM CVSS: 4.3 Published: 2026-09-09 Modified: 2026-09-14

Description

SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields (including passwords and roles) via crafted parameters to the User/mod interface, enabling account takeover.

Affected Platforms

Unknown

Weakness Type

CWE-89

References