PT-2024-14443

Name of the Vulnerable Software and Affected Versions PMB versions 7.4.7 and earlier Description A SQL Injection issue in the /admin/sauvegarde/run.php endpoint allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable. This enables attackers to manipula...

CVE-2023-52155

A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint...