238 matches found
CVE-2023-52154
File Upload vulnerability in pmb/cameraupload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHTML files...
CVE-2023-52154
The PMB document management system (versions 7.4.7 and earlier ) is vulnerable to a file upload flaw in the pmb/camera_upload.php component. An unauthenticated, remote attacker can exploit this by uploading a crafted PHTML file to execute arbitrary code on the target system. The provided document...
CVE-2023-52153
A SQL Injection vulnerability in /pmb/opaccss/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value...
PT-2024-12766
Name of the Vulnerable Software and Affected Versions PMB versions 7.4.7 and earlier Description The issue allows a remote attacker to execute arbitrary code via the thesaurus parameter in "export skos.php". Recommendations For PMB versions 7.4.7 and earlier, as a temporary workaround, consider...
CVE-2023-46474
File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the startimport.php file...
CVE-2023-46474
Affected software : PMB v7.4.8. Vulnerability : file upload vulnerability enabling remote code execution and privilege escalation via a crafted PHP file uploaded to the start_import.php file. The underlying issue is an unlimited file upload vector that permits arbitrary code execution. Impact : r...
CVE-2023-46474: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the startimport.php file...
PMB security breach
PMB is a 100% free document management reference tool from the PMB Services team. A security vulnerability exists in PMB version v.7.4.8, which originates from a vulnerability that allows remote attackers to execute arbitrary code and escalate privileges by uploading the startimport.php file...
CVE-2023-46474
File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the startimport.php file...
PMB 7.4.6 - SQL Injection
Exploit Title: PMB 7.4.6 - SQL Injection Google Dork: inurl:opaccss Date: 2023-01-06 Exploit Author: str0xo DZ Walid Ben https://github.com/Str0xo Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files Affected versions : = 7.4.6 -==== Software...
CVE-2023-24733
PMB v7.4.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the query parameter at /admin/convert/exportz3950new.php...
CVE-2023-24734
An arbitrary file upload vulnerability in the cameraupload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file...
CVE-2023-24733
PMB v7.4.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the query parameter at /admin/convert/exportz3950new.php...
CVE-2023-24736
PMB v7.4.6 was discovered to contain a remote code execution RCE vulnerability via the component /sauvegarde/restaureact.php...
CVE-2023-24735
PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opaccss/pmb.php. This vulnerability allows attackers to redirect victim users to an external domain via a crafted URL...
CVE-2023-24735
PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opaccss/pmb.php. This vulnerability allows attackers to redirect victim users to an external domain via a crafted URL...
CVE-2023-24736
PMB v7.4.6 was discovered to contain a remote code execution RCE vulnerability via the component /sauvegarde/restaureact.php...
CVE-2023-24733
PMB v7.4.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the query parameter at /admin/convert/exportz3950new.php...