| Package | Affected versions | Patched versions |
|---|---|---|
| pmb | ≤ 7.4.7 |
A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free