Sigb Pmb vulnerabilities

• redmine pmb PMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter CVE-2023-53982 9.3 CriticalDecember 23, 2025
• sigb pmb An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute... CVE-2025-61168 9.8 CriticalNovember 25, 2025
• sigb pmb SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the ... CVE-2025-61167 6.5 MediumNovember 25, 2025
• redmine pmb In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution. CVE-2025-48744 6.4 MediumMay 27, 2025
• redmine pmb SIGB PMB before 8.0.1.2 allows SQL injection. CVE-2025-48743 5.3 MediumMay 27, 2025
• redmine pmb The installer in SIGB PMB before 8.0.1.2 allows remote code execution. CVE-2025-48742 5.4 MediumMay 27, 2025
• pmb services platform, sigb pmb +1 more Incomplete Cleanup vulnerability in PMB platform CVE-2025-0473 6.5 MediumJanuary 16, 2025
• pmb services platform, sigb pmb +1 more Information exposure vulnerability in PMB platform CVE-2025-0472 7.5 HighJanuary 16, 2025
• pmb services platform, sigb pmb +1 more Unrestricted Upload of File with Dangerous Type vulnerability in PMB platform CVE-2025-0471 9.9 CriticalJanuary 16, 2025
• pmb services pmb Remote Code Inclusion Vulnerability in Multiple PMB Versions CVE-2024-26289 9.8 CriticalMay 27, 2024
• sigb pmb A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote... CVE-2023-52155 7.2 HighFebruary 21, 2024
• pmb project pmb File Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to... CVE-2023-52154 7.2 HighFebruary 21, 2024
• pmb project pmb A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier... CVE-2023-52153 9.8 CriticalFebruary 21, 2024
• pmb project pmb A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier... CVE-2023-51828 9.8 CriticalFebruary 21, 2024
• pmb project pmb SQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute... CVE-2023-38844 7.5 HighFebruary 21, 2024
• pmb services pmb SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote... CVE-2023-37177 9.8 CriticalFebruary 21, 2024
• sigb pmb File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and... CVE-2023-46474 Public exploit EPSS 21.2% 7.2 HighJanuary 11, 2024
• sigb pmb PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the... CVE-2023-24737 6.1 MediumMarch 6, 2023
• sigb pmb PMB v7.4.6 was discovered to contain a remote code execution (RCE) vulnerability via the... CVE-2023-24736 9.8 CriticalMarch 6, 2023
• sigb pmb PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css... CVE-2023-24735 6.1 MediumMarch 6, 2023
• sigb pmb An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows... CVE-2023-24734 EPSS 20.7% 9.8 CriticalMarch 6, 2023
• sigb pmb PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the... CVE-2023-24733 6.1 MediumMarch 6, 2023
• sigb pmb PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see request to index.php. CVE-2022-34328 6.1 MediumJune 22, 2022