Approved changes feed: RSS · Atom

cpe:2.3:a:pmb_services:pmb:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPmb Services (87e210c2-ffb6-52a5-ae14-f0632dc35b56)
ProductPmb (9b49a7fd-fad2-5f05-8571-77f390e0eaa1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-26289 vulnerable 2026-06-08 06:31:26.259663 Remote Code Inclusion Vulnerability in Multiple PMB Versions
CRITICAL (9.8)
Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18.
Published: 2024-05-27T07:01:52.386Z
Updated: 2024-08-02T00:07:19.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37177 vulnerable 2026-06-08 06:08:14.845643 Details available
SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/export_z3950.php endpoint.
Published: 2024-02-21T00:00:00.000Z
Updated: 2024-08-15T18:07:35.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9457 vulnerable 2026-06-08 05:06:11.814072 Details available
SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the id parameter to catalog.php.
Published: 2015-01-02T20:00:00.000Z
Updated: 2024-09-16T20:58:58.020Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.