Description
SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/export_z3950.php endpoint.
Critical · 9.8
CVE-2023-37177
EUVD-2023-41097GHSA-8w7v-3vv4-c289
SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via t…
Published Feb 21, 2024 · Updated Aug 15, 2024 · Assigned by mitre