Skip to content
Noroxi

SIGB records

23 published records for vendor sigb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
8
With a fix record
4.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

23 records
  • CVE-2023-24734
    45Plan

    An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a cra

    CriticalCVSS 9.8No exploitEPSS 21%

    sigb · pmbMar 6, 2023

  • CVE-2023-24736
    39Monitor

    PMB v7.4.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /sauvegarde/restaure_act.php.

    CriticalCVSS 9.8No exploitEPSS 2%

    sigb · pmbMar 6, 2023

  • CVE-2023-37177
    39Monitor

    SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via th

    CriticalCVSS 9.8No exploitEPSS 1%

    sigb · pmbFeb 21, 2024

  • CVE-2023-51828
    39Monitor

    A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers t

    CriticalCVSS 9.8No exploitEPSS 1%

    sigb · pmbFeb 21, 2024

  • CVE-2023-52153
    39Monitor

    A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to

    CriticalCVSS 9.8No exploitEPSS 1%

    sigb · pmbFeb 21, 2024

  • CVE-2024-26289
    39Monitor

    Remote Code Inclusion Vulnerability in Multiple PMB Versions

    CriticalCVSS 9.8No exploitEPSS 1%

    sigb · pmbMay 27, 2024

  • CVE-2025-48744
    39Monitor

    In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.

    CriticalCVSS 9.8No exploitEPSS 1%

    sigb · pmbMay 26, 2025

  • CVE-2025-0471
    39Monitor

    Unrestricted Upload of File with Dangerous Type vulnerability in PMB platform

    CriticalCVSS 9.8No exploitEPSS 1%

    sigb · pmbJan 16, 2025

  • CVE-2025-61168
    39Monitor

    An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.

    CriticalCVSS 9.8No exploitEPSS 0%

    sigb · pmbNov 25, 2025

  • CVE-2025-48742
    39Monitor

    The installer in SIGB PMB before and fixed in v.8.0.1.2 allows remote code execution.

    CriticalCVSS 9.8No exploitEPSS 0%

    sigb · pmbMay 27, 2025

  • CVE-2025-48743
    39Monitor

    SIGB PMB before 8.0.1.2 allows SQL injection.

    CriticalCVSS 9.8No exploitEPSS 0%

    sigb · pmbMay 26, 2025

  • CVE-2023-53982
    37Monitor

    PMB 7.4.6 SQL Injection Vulnerability via Unsanitized Storage Parameter

    CriticalCVSS 9.3No exploitEPSS 1%

    sigb · pmbDec 23, 2025

  • CVE-2023-46474
    34Monitor

    File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uplo

    HighCVSS 7.2Proof of conceptEPSS 21%

    sigb · pmbJan 11, 2024

  • CVE-2023-38844
    30Monitor

    SQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute arbitrary code via the thesaurus parameter in exp

    HighCVSS 7.5No exploitEPSS 1%

    sigb · pmbFeb 21, 2024

  • CVE-2025-0472
    30Monitor

    Information exposure vulnerability in PMB platform

    HighCVSS 7.5No exploitEPSS 0%

    sigb · pmbJan 16, 2025

  • CVE-2025-0473
    30Monitor

    Incomplete Cleanup vulnerability in PMB platform

    HighCVSS 7.5No exploitEPSS 0%

    sigb · pmbJan 16, 2025

  • CVE-2023-52155
    28Monitor

    A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitra

    HighCVSS 7.2No exploitEPSS 1%

    sigb · pmbFeb 21, 2024

  • CVE-2023-52154
    28Monitor

    File Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHT

    HighCVSS 7.2No exploitEPSS 1%

    sigb · pmbFeb 21, 2024

  • CVE-2025-61167
    26Monitor

    SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opac_css/ajax_selector.php component via the id

    MediumCVSS 6.5No exploitEPSS 0%

    sigb · pmbNov 25, 2025

  • CVE-2022-34328
    25Monitor

    PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see request to index.php.

    MediumCVSS 6.1Proof of conceptEPSS 2%

    sigb · pmbJun 23, 2022

  • CVE-2023-24737
    24Monitor

    PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z

    MediumCVSS 6.1Proof of conceptEPSS 1%

    sigb · pmbMar 6, 2023

  • CVE-2023-24733
    24Monitor

    PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z

    MediumCVSS 6.1Proof of conceptEPSS 1%

    sigb · pmbMar 6, 2023

  • CVE-2023-24735
    24Monitor

    PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php.

    MediumCVSS 6.1Proof of conceptEPSS 1%

    sigb · pmbMar 6, 2023