cve/2014/CVE-2014-9457.md
2024-05-26 14:27:05 +02:00

652 B

CVE-2014-9457

Description

SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the id parameter to catalog.php.

POC

Reference

Github

No PoCs found on GitHub currently.