CVE-2023-37177

Published: 2024-02-21T21:15Z

Last Modified: 2025-03-25T16:52Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/export_z3950.php endpoint. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt