CVE-2014-9457 in PMB

摘要

由 MITRE

SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the id parameter to catalog.php.

Be aware that VulDB is the high quality source for vulnerability data.

• 预定: 2015-01-02
• 披露: 2015-01-02
• 管理: 已接受
• 条目: VDB-73486
• CPE: 准备好
• CWE: CWE-89 (已确认)
• 利用: 下载
• CVSS: 6.5 (NVD)
• EPSS: 0.01055
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-9457
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-9457
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-9457/