CVE-2025-61167

Mô tả

Tham khảo

• forge.sigb.net/projects/pmb/wiki/Changelog_801 · Release Notes
• gist.github.com/ZanyMonk/ed12e265f777152c33aeb806a644850e · Third Party Advisory

Lỗ hổng khác của pmb

• CVE-2023-53982CAO 7.5PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint…
• CVE-2025-61168NGHIÊM TRỌNG 9.8An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.
• CVE-2025-48742NGHIÊM TRỌNG 9.8The installer in SIGB PMB before and fixed in v.8.0.1.2 allows remote code execution.
• CVE-2025-48744NGHIÊM TRỌNG 9.8In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.
• CVE-2025-48743NGHIÊM TRỌNG 9.8SIGB PMB before 8.0.1.2 allows SQL injection.