CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/23 4:49 a.m.•12 views

CVE-2023-37177

SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php endpoint...

9.8CVSS8.9AI score0.01118EPSS

Exploits1

OSV•added 2024/02/21 9:15 p.m.•7 views

CVE-2023-37177

9.8CVSS6.1AI score

Exploits0References1

CVE•added 2024/02/21 12:0 a.m.•37 views

CVE-2023-37177

CVE-2023-37177 is a SQL injection affecting PMB Services PMB v.7.4.7 and earlier. The flaw permits a remote, unauthenticated attacker to execute arbitrary code via the query parameter in /admin/convert/export_z3950.php. Affected component: PMB PMB software; root cause: unsafeguarded input handlin...

9.8CVSS8.8AI score0.01118EPSS

Exploits1References1Affected Software1