CVE-2023-46474

PMB =7.5.3 - Remote Code Execution via Unrestricted File Upload CVE-2023-46474 CVSS v3.1 Vector| CVSS v3.1 Score ---|--- AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H| 9.1 Discovered during a penetration test by Marcus Reynaud of Devensys Cybersecurity Description The script pmb/admin/convert/startimport.p...

CVE-2023-46474

File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the startimport.php file...

CVE-2023-46474

Affected software : PMB v7.4.8. Vulnerability : file upload vulnerability enabling remote code execution and privilege escalation via a crafted PHP file uploaded to the start_import.php file. The underlying issue is an unlimited file upload vector that permits arbitrary code execution. Impact : r...