CVE-2014-9457 in PMB

Summary

SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the id parameter to catalog.php.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 01/02/2015
• Disclosure: 01/02/2015
• Moderation: VulDB entry created
• Entries: 1: VDB-73486
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 6.3
• EPSS: 0.00705
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-9457
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-9457
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-9457/