Description
A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value.
Critical · 9.8
CVE-2023-52153
EUVD-2023-56826GHSA-xvhr-3rcv-j8f8
A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers t…
Published Feb 21, 2024 · Updated Aug 22, 2024 · Assigned by mitre