Sigb vulnerabilities
We track 7 vulnerabilities in Sigb products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on December 23, 2025.
Latest Sigb vulnerabilities
- 7.5 High severity
PMB: Improper Neutralization of Special Elements used in an SQL Command
PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by in
- 7.5 High severity
PMB platform: Incomplete Cleanup
Vulnerability in the PMB platform that allows an attacker to persist temporary files on the server, affecting versions 4.0.10 and above. This vulnerability exists in the file upload functionality on the ‘/pmb/authorities/import/iimport_authorities’ endpoint. W
- 7.5 High severity
PMB platform: Unrestricted Upload of File with Dangerous Type
Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine by looking at the request response.
- 9.8 Critical severity
PMB platform: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, being able to access, modify and execute commands freely.
- 7.2 High severity
pmb: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint.
- 7.2 High severity
Pmb: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the start_import.php file.
- 9.8 Critical severity
Pmb: Use After Free
An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.