TI-2014-07684 CVE-2014-9457 · GHSA-4gxm-8q9g-qvqrSQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier…Priority LOW 31SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the id parameter to catalog.php.CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01055 · Published 2015-01-02 · No fix listed CWE-89