Skip to content
OpenAdvisories

Vendor

SIGB

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    PMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter

    PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by i…