CVE-2025-61167

🗓️ 25 Nov 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 3 Views🌐 WEB

CVE-2025-61167: SIGB PMB 8.0.1.14 has SQL injection flaws in /opac_css/ajax_selector.php via id and datas.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-61167	25 Nov 202522:35	–	circl
CNNVD	SIGB PMB 安全漏洞	25 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-61167	25 Nov 202500:00	–	cvelist
EUVD	EUVD-2025-199634	25 Nov 202521:32	–	euvd
NVD	CVE-2025-61167	25 Nov 202519:15	–	nvd
OSV	CVE-2025-61167	25 Nov 202519:15	–	osv
Positive Technologies	PT-2025-48069	25 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-61167	27 Nov 202516:59	–	redhatcve
Vulnrichment	CVE-2025-61167	25 Nov 202500:00	–	vulnrichment

NVD

Node

sigb pmbMatch8.0.1.14

Source	Link
forge	www.forge.sigb.net/projects/pmb/wiki/Changelog_801
pmb	www.pmb.com/
sigb	www.sigb.com/
gist	www.gist.github.com/ZanyMonk/ed12e265f777152c33aeb806a644850e

Parameter	Position	Path	Description	CWE
id	query param	opac_css/ajax_selector.php	SQL injection vulnerability in opac_css/ajax_selector.php via id and datas parameters	CWE-89
datas	query param	opac_css/ajax_selector.php	SQL injection vulnerability in opac_css/ajax_selector.php via id and datas parameters	CWE-89

01 Dec 2025 14:20Current

8.1High risk

Vulners AI Score8.1

CVSS 3.16.5

EPSS0.00029

SSVC