İçeriğe atla
Noroxi

SIGB kayıtları

sigb üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
8
Düzeltme kaydı olan
%4,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

23 kayıt
  • CVE-2023-24734
    45Planlayın

    An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a cra

    KritikCVSS 9,8İstismar yokEPSS %21

    sigb · pmb6 Mar 2023

  • CVE-2023-24736
    39İzleyin

    PMB v7.4.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /sauvegarde/restaure_act.php.

    KritikCVSS 9,8İstismar yokEPSS %2

    sigb · pmb6 Mar 2023

  • CVE-2023-37177
    39İzleyin

    SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via th

    KritikCVSS 9,8İstismar yokEPSS %1

    sigb · pmb21 Şub 2024

  • CVE-2023-51828
    39İzleyin

    A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers t

    KritikCVSS 9,8İstismar yokEPSS %1

    sigb · pmb21 Şub 2024

  • CVE-2023-52153
    39İzleyin

    A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to

    KritikCVSS 9,8İstismar yokEPSS %1

    sigb · pmb21 Şub 2024

  • CVE-2024-26289
    39İzleyin

    Remote Code Inclusion Vulnerability in Multiple PMB Versions

    KritikCVSS 9,8İstismar yokEPSS %1

    sigb · pmb27 May 2024

  • CVE-2025-0471
    39İzleyin

    Unrestricted Upload of File with Dangerous Type vulnerability in PMB platform

    KritikCVSS 9,8İstismar yokEPSS %1

    sigb · pmb16 Oca 2025

  • CVE-2025-48744
    39İzleyin

    In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %1

    sigb · pmb26 May 2025

  • CVE-2025-61168
    39İzleyin

    An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.

    KritikCVSS 9,8İstismar yokEPSS %0

    sigb · pmb25 Kas 2025

  • CVE-2025-48742
    39İzleyin

    The installer in SIGB PMB before and fixed in v.8.0.1.2 allows remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %0

    sigb · pmb27 May 2025

  • CVE-2025-48743
    39İzleyin

    SIGB PMB before 8.0.1.2 allows SQL injection.

    KritikCVSS 9,8İstismar yokEPSS %0

    sigb · pmb26 May 2025

  • CVE-2023-53982
    37İzleyin

    PMB 7.4.6 SQL Injection Vulnerability via Unsanitized Storage Parameter

    KritikCVSS 9,3İstismar yokEPSS %1

    sigb · pmb23 Ara 2025

  • CVE-2023-46474
    34İzleyin

    File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uplo

    YüksekCVSS 7,2Kavram kanıtıEPSS %21

    sigb · pmb11 Oca 2024

  • CVE-2023-38844
    30İzleyin

    SQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute arbitrary code via the thesaurus parameter in exp

    YüksekCVSS 7,5İstismar yokEPSS %1

    sigb · pmb21 Şub 2024

  • CVE-2025-0472
    30İzleyin

    Information exposure vulnerability in PMB platform

    YüksekCVSS 7,5İstismar yokEPSS %0

    sigb · pmb16 Oca 2025

  • CVE-2025-0473
    30İzleyin

    Incomplete Cleanup vulnerability in PMB platform

    YüksekCVSS 7,5İstismar yokEPSS %0

    sigb · pmb16 Oca 2025

  • CVE-2023-52155
    28İzleyin

    A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitra

    YüksekCVSS 7,2İstismar yokEPSS %1

    sigb · pmb21 Şub 2024

  • CVE-2023-52154
    28İzleyin

    File Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHT

    YüksekCVSS 7,2İstismar yokEPSS %1

    sigb · pmb21 Şub 2024

  • CVE-2025-61167
    26İzleyin

    SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opac_css/ajax_selector.php component via the id

    OrtaCVSS 6,5İstismar yokEPSS %0

    sigb · pmb25 Kas 2025

  • CVE-2022-34328
    25İzleyin

    PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see request to index.php.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    sigb · pmb23 Haz 2022

  • CVE-2023-24737
    24İzleyin

    PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    sigb · pmb6 Mar 2023

  • CVE-2023-24733
    24İzleyin

    PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    sigb · pmb6 Mar 2023

  • CVE-2023-24735
    24İzleyin

    PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    sigb · pmb6 Mar 2023