https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:49:33.080037+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-274571 EUVD-2026-274571 2026-10-07T13:49:33.143118+00:00 EUVD-2026-274571 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53982 fkie_cve-2023-53982 2026-10-07T13:49:33.143156+00:00

PMB 7.4.6 contains a SQL injection vulnerability in the storage parameter of the ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements to extract information or perform time-based blind SQL injection attacks.

 https://cve.radiocsirt.org/vuln/ghsa-pxx7-72gh-6rgr GHSA-pxx7-72gh-6rgr 2026-10-07T13:49:33.143190+00:00

PMB 7.4.6 contains a SQL injection vulnerability in the storage parameter of the ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements to extract information or perform time-based blind SQL injection attacks.