Vulnerabilidades do Sigb Pmb

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Sigb Pmb: 3 registro(s), com versões afetadas e correções.
cpe:2.3:a:sigb:pmb

CVE-2023-53982 Alta · 7.5 CWE-89 23/12/2025

PMB 7.4.6 SQL Injection Vulnerability via Unsanitized Storage Parameter

PMB 7.4.6 contains a SQL injection vulnerability in the storage parameter of the ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements to extract information or perform time-based blind SQL injection attacks.

CVE-2025-61168 Crítica · 9.8 CWE-502 25/11/2025

Deserialization of Untrusted Data em Sigb Pmb

An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.

CVE-2025-61167 Média · 6.5 CWE-89 25/11/2025

SQL Injection em Sigb Pmb

SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opac_css/ajax_selector.php component via the id and datas parameters.