CVE-2023-52154 File Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHTML files.
HighCVSS 7.2
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
File Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHTML files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pmb project pmb | = 7.4.7 | No fix listed |
| sigb pmb | <= 7.4.7 | No fix listed |
References
- nexacybersecurity.blogspot.com exploit third-party-advisory