Sigb Pmb vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Sigb Pmb: 3 record(s), with affected versions and fixes.
cpe:2.3:a:sigb:pmb

CVE-2023-53982 High · 7.5 CWE-89 Dec 23, 2025

PMB 7.4.6 SQL Injection Vulnerability via Unsanitized Storage Parameter

PMB 7.4.6 contains a SQL injection vulnerability in the storage parameter of the ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements to extract information or perform time-based blind SQL injection attacks.

CVE-2025-61168 Critical · 9.8 CWE-502 Nov 25, 2025

Deserialization of Untrusted Data in Sigb Pmb

An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.

CVE-2025-61167 Medium · 6.5 CWE-89 Nov 25, 2025

SQL Injection in Sigb Pmb

SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opac_css/ajax_selector.php component via the id and datas parameters.