4 matches found
CVE-2023-52153
A SQL Injection vulnerability in /pmb/opaccss/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value...
CVE-2023-52153: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability in /pmb/opaccss/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value...
CVE-2023-52153
A SQL Injection vulnerability in /pmb/opaccss/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value...
PT-2024-14441
Name of the Vulnerable Software and Affected Versions PMB versions 7.4.7 and earlier Description A SQL Injection issue in /pmb/opac css/includes/sessions.inc.php allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value. This enables attackers to...