CVE-2023-52155

PMB versions 7.4.7 and earlier are affected by a SQL Injection vulnerability in the /admin/sauvegarde/run.php endpoint. This flaw allows remote authenticated attackers to execute arbitrary SQL commands by manipulating the sauvegardes variable. Successful exploitation can lead to unauthorized data...