Lucene search

K

6 matches found

CVE
CVE
added 2024/02/21 10:15 p.m.33 views

CVE-2023-51828

A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in get_next_notice function.

9.8CVSS8.9AI score0.00813EPSS
CVE
CVE
added 2024/02/21 10:15 p.m.25 views

CVE-2023-52154

File Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHTML files.

7.2CVSS7.3AI score0.00068EPSS
CVE
CVE
added 2024/02/21 10:15 p.m.25 views

CVE-2023-52155

A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint.

7.2CVSS8.4AI score0.00277EPSS
CVE
CVE
added 2024/02/21 10:15 p.m.23 views

CVE-2023-52153

A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value.

9.8CVSS8.4AI score0.00366EPSS
CVE
CVE
added 2024/02/21 9:15 p.m.18 views

CVE-2023-38844

SQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute arbitrary code via the thesaurus parameter in export_skos.php.

7.5CVSS8.6AI score0.00198EPSS
CVE
CVE
added 2024/02/21 9:15 p.m.16 views

CVE-2023-37177

SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/export_z3950.php endpoint.

9.8CVSS8.8AI score0.02441EPSS