Security Advisory
CVE-2023-52155
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint.