{"id":"CVE-2023-53982","title":"PMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter","summary":"PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitiz…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-89"],"vendor":"Sigb","product":"PMB","affected":["PMB 7.4.6"],"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2025-12-23T21:38:20.240545Z"},"exploitAvailable":true,"published":"2025-12-23","updated":"2026-10-29","sourceUpdated":"2026-10-29T21:15:03.753Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-53982","references":[{"url":"https://www.exploit-db.com/exploits/51197","label":"ExploitDB-51197"},{"url":"http://www.sigb.net","label":"Vendor Homepage"},{"url":"http://forge.sigb.net/redmine/projects/pmb/files","label":"Software Download Repository"},{"url":"https://www.vulncheck.com/advisories/pmb-sql-injection-vulnerability-via-unsanitized-storage-parameter","label":"VulnCheck Advisory: PMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter"}],"tags":["cve.org","exploit-available"],"epss":0.00606,"epssPercentile":0.49003,"ingestedAt":"2026-11-03T08:39:35.531Z","slug":"CVE-2023-53982","body":"## Overview\n\nPMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements to extract information or perform time-based blind SQL injection attacks.\n\n## Affected\n\n- `PMB 7.4.6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}