Pmb Project vulnerabilities
We track 3 vulnerabilities in Pmb Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 21, 2024.
Latest Pmb Project vulnerabilities
- 9.8 Critical severity
pmb: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value.
- 9.8 Critical severity
pmb: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in get_next_notice function.
- 7.5 High severity
pmb: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute arbitrary code via the thesaurus parameter in export_skos.php.