Sigb PMB 7.4.6
Approved changes feed: RSS · Atom
cpe:2.3:a:sigb:pmb:7.4.6:*:*:*:*:*:*:*part: a version: 7.4.6 update: *
| Vendor | Sigb (b164882e-7e81-5260-a9ad-186d288cfe3c) |
|---|---|
| Product | Pmb (97298a59-8301-5b1f-bc1b-b55ca581a901) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-53982 |
vulnerable | 2026-06-08 06:19:40.250176 |
PMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter
HIGH (7.5)
PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements to extract information or perform time-based blind SQL injection attacks.
Published: 2025-12-23T19:34:11.262Z
Updated: 2026-10-29T21:15:03.753Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24737 |
vulnerable | 2026-06-08 05:56:06.216722 |
Details available
PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950.php.
Published: 2023-03-06T00:00:00.000Z
Updated: 2024-08-02T11:03:18.945Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24736 |
vulnerable | 2026-06-08 05:56:06.216395 |
Details available
PMB v7.4.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /sauvegarde/restaure_act.php.
Published: 2023-03-06T00:00:00.000Z
Updated: 2024-08-02T11:03:19.202Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24735 |
vulnerable | 2026-06-08 05:56:06.216047 |
Details available
PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerability allows attackers to redirect victim users to an external domain via a crafted URL.
Published: 2023-03-06T00:00:00.000Z
Updated: 2024-08-02T11:03:19.169Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24734 |
vulnerable | 2026-06-08 05:56:06.215796 |
Details available
An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.
Published: 2023-03-06T00:00:00.000Z
Updated: 2024-11-27T14:54:29.171Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24733 |
vulnerable | 2026-06-08 05:56:06.215296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.