SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opac_css/ajax_selector.php component via the id and datas parameters.
References
| Link | Resource |
|---|---|
| http://pmb.com | Not Applicable |
| http://sigb.com | Product |
| https://forge.sigb.net/projects/pmb/wiki/Changelog_801#S%C3%A9curit%C3%A9-2 | Release Notes |
| https://gist.github.com/ZanyMonk/ed12e265f777152c33aeb806a644850e | Third Party Advisory |
Configurations
History
01 Dec 2025, 14:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://pmb.com - Not Applicable | |
| References | () http://sigb.com - Product | |
| References | () https://forge.sigb.net/projects/pmb/wiki/Changelog_801#S%C3%A9curit%C3%A9-2 - Release Notes | |
| References | () https://gist.github.com/ZanyMonk/ed12e265f777152c33aeb806a644850e - Third Party Advisory | |
| First Time |
Sigb pmb
Sigb |
|
| CPE | cpe:2.3:a:sigb:pmb:8.0.1.14:*:*:*:*:*:*:* |
25 Nov 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
25 Nov 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-25 19:15
Updated : 2025-12-01 14:20
NVD link : CVE-2025-61167
Mitre link : CVE-2025-61167
CVE.ORG link : CVE-2025-61167
JSON object : View
Products Affected
sigb
- pmb
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')