Security Advisory

CVE-2023-52153

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-21 00:00:00

Last updated 2024-08-22 18:17:13

Assigner mitre

State PUBLISHED

Description

A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value.

← Browse all CVEs View on cve.org ↗