Security Advisory
CVE-2018-10132
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the recontent parameter.