CVE-2025-61167

概要

参考情報

• forge.sigb.net/projects/pmb/wiki/Changelog_801 · Release Notes
• gist.github.com/ZanyMonk/ed12e265f777152c33aeb806a644850e · Third Party Advisory

pmb のその他の脆弱性

• CVE-2023-53982高 7.5PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint…
• CVE-2025-61168緊急 9.8An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.
• CVE-2025-48742緊急 9.8The installer in SIGB PMB before and fixed in v.8.0.1.2 allows remote code execution.
• CVE-2025-48744緊急 9.8In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.
• CVE-2025-48743緊急 9.8SIGB PMB before 8.0.1.2 allows SQL injection.