CVE-2023-24735

MEDIUM NUCLEI

PMB <7.4.6 - Open Redirect

Title source: llm

Description

PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerability allows attackers to redirect victim users to an external domain via a crafted URL.

Nuclei Templates (1)

PMB 7.4.6 - Open Redirect

MEDIUMVERIFIEDby r3Y3r53

Shodan: http.favicon.hash:1469328760 || http.html:"pmb group"

FOFA: body="pmb group" || icon_hash=1469328760

References (1)

[Exploit] https://github.com/AetherBlack/CVE/tree/main/PMB

View Exploit ZIP pw:eip

Scores

CVSS v3 6.1

EPSS 0.0712

EPSS Percentile 91.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (1)

sigb/pmb 7.4.6

Published Mar 06, 2023

Tracked Since Feb 18, 2026