PMB vulnerabilities
CVEs whose affected-version data names the PMB package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2023-53982High· 7.5PoCPMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter
PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitiz…
▾ MidnightSigb · PMBEPSS 0.61%via CVEORG
CVE-2025-61168Critical· 9.8An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.
An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.
▾ Midnightsigb · pmbEPSS 0.53%via NVD
CVE-2025-61167Medium· 6.5SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opac_css/ajax_selector.php component via the id and datas parameters.
SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opac_css/ajax_selector.php component via the id and datas parameters.
▾ Sunlitsigb · pmbEPSS 0.22%via NVD