PT-2024-12593

Name of the Vulnerable Software and Affected Versions PMB Services PMB versions 7.4.7 and earlier Description The issue allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the "/admin/convert/export z3950.php" endpoint. This enables the attacker to perfor...