SQL Injection Vulnerability in PMB by PMB-Soft
CVE-2014-9457

Currently unrated

Key Information:

Vendor: Pmb Services
Status: Pmb
Vendor: CVE Published:; 2 January 2015

🔔 Create Pmb Services Vulnerability Alert

What is CVE-2014-9457?

An SQL injection vulnerability exists in the PMB product, specifically in the classes/mono_display.class.php file. This flaw allows remote authenticated users to execute arbitrary SQL commands through the id parameter in catalog.php, potentially compromising the database integrity and exposing sensitive information. It is crucial for users of affected versions to implement immediate mitigations and updates to safeguard their systems.

References

http://www.exploit-db.com/exploits/35625

exploitx_refsource_EXPLOIT-DB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Jan 2, 2015