PMB SQL Injection Vulnerability in Administration Download Script

A SQL injection vulnerability has been identified in PMB version 5.6, specifically within the administration download script located at '/admin/sauvegarde/download.php'. This vulnerability allows authenticated attackers to execute arbitrary SQL commands by manipulating the 'logid' parameter. Exploitation involves sending crafted requests to the vulnerable endpoint, enabling attackers to interact with the database in unauthorized ways.

Impact

Exploitation of this vulnerability allows for arbitrary SQL command execution, which could lead to unauthorized data access, data manipulation, or potentially executing administrative operations through the database.

Reproduction

To reproduce this vulnerability, an authenticated user must send a request to the '/admin/sauvegarde/download.php' endpoint with a manipulated 'logid' parameter. This can be done using a tool like SQLMap, targeting the 'logid' parameter to exploit the SQL injection.