CVE-2023-52155

PMB, a document management tool, is affected by a SQL Injection vulnerability in versions 7.4.7 and earlier . The flaw exists in the /admin/sauvegarde/run.php endpoint, where the sauvegarde variable is improperly neutralized. This allows remote authenticated attackers to execute arbitrary SQL com...