Vulnerabilities > CVE-2023-24734 - Use After Free vulnerability in Sigb PMB 7.4.6

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

sigb

CWE-416

critical

NVD

Published: 2023-03-06

Updated: 2024-01-18

Summary

An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.

Vulnerable Configurations

Part	Description	Count
Application	Sigb Sigb PMB 7.4.6	1

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://github.com/AetherBlack/CVE/tree/main/PMB