SQL Injection Vulnerability in PMB by PMB-Soft
CVE-2014-9457

Currently unrated

Key Information:

Vendor: Pmb Services
Status: Pmb
Vendor: CVE Published:; 2 January 2015

🔔 Create Pmb Services Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2014-9457?

An SQL injection vulnerability exists in the PMB product, specifically in the classes/mono_display.class.php file. This flaw allows remote authenticated users to execute arbitrary SQL commands through the id parameter in catalog.php, potentially compromising the database integrity and exposing sensitive information. It is crucial for users of affected versions to implement immediate mitigations and updates to safeguard their systems.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2014-9457 - Proof of Concept

References

http://www.exploit-db.com/exploits/35625

exploitx_refsource_EXPLOIT-DB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
🟡
Public PoC available
Jan 2, 2015
👾
Exploit known to exist
Jan 2, 2015
Vulnerability published
Jan 2, 2015

CVE-2014-9457 Data

JSON