CVE Intelligence

PMB Services vulnerabilities

🔔 Create alert RSS

Published CVEs affecting PMB Services products: 1 record(s), with severity, exploitation and fixes.

PMB Services 1

Exploited only (KEV) →

CVE-2020-36970 High · 8.4 CWE-22 Jan 28, 2026
PMB 5.6 - 'chemin' Local File Disclosure
PMB 5.6 contains a local file disclosure vulnerability in getgif.php that allows attackers to read arbitrary system files by manipulating the 'chemin' parameter. Attackers can exploit the unsanitized file path input to access sensitive files like /etc/passwd by sending crafted requests to the getgif.php endpoint.