CVE-2023-51828

A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in getnextnotice function...

PMB security breach

PMB is a 100% free document management reference tool from the PMB Services team. A security vulnerability exists in PMB version v.7.4.8, which originates from a vulnerability that allows remote attackers to execute arbitrary code and escalate privileges by uploading the startimport.php file...

CVE-2023-24737

PMB v7.4.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the query parameter at /admin/convert/exportz3950.php...

Remote code execution

PMB v7.4.6 was discovered to contain a remote code execution RCE vulnerability via the component /sauvegarde/restaureact.php...

Cross site scripting

PMB v7.4.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the query parameter at /admin/convert/exportz3950new.php...

PT-2023-19758 · Pmb · Pmb

Name of the Vulnerable Software and Affected Versions: PMB version 7.4.6 Description: An arbitrary file upload vulnerability in the camera upload.php component allows attackers to execute arbitrary code via a crafted image file. Recommendations: For PMB version 7.4.6, update to a version that fix...