4 matches found
CVE-2023-37177
SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php endpoint...
CVE-2023-37177
SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php endpoint...
CVE-2023-37177
PMB Services PMB versions v.7.4.7 and before are vulnerable to a SQL Injection vulnerability (CWE-89). A remote unauthenticated attacker can exploit the query parameter in the /admin/convert/export_z3950.php endpoint to execute arbitrary code and perform unauthorized actions on the system. While ...
CVE-2023-37177
SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php endpoint...