Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Sigb

First CVE: Jun 23, 2022Active for: 4 yearsTotal CVEs: 23
59.7
VTI Score
TOP TARGET

Sigb maintains a focused product line centered on PMB, a web-based application that has drawn a concentrated vulnerability footprint despite modest volume. The exposure skews strongly toward critical-severity outcomes and frequently acquires public exploit tooling, reflecting the application's web-facing role and the particular severity of its recurring weakness classes. Vulnerabilities cluster around input-handling and deserialization flaws—SQL injection, unrestricted file upload, cross-site scripting, and untrusted deserialization—alongside exposure of sensitive information, patterns typical of applications where user input flows directly into server-side logic and data handling without sufficient sanitization. Defenders should prioritize patches for this vendor's advisories and treat internet-reachable instances of PMB as high-risk; current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
23
Total CVEs
More Total CVEs than 96% of tracked vendors
5.8
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 98% of tracked vendors
8.3
Avg CVSS Score
Higher Avg CVSS Score than 81% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Sigb over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 23, 2022
4 years ago
Most Recent CVE
Dec 23, 2025
213 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (23 CVEs).

23 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-24734CRITICAL
An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.
Mar 6, 20239.840NONO
CVE-2025-61168CRITICAL
An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.
Nov 25, 20259.833NONO
CVE-2023-46474HIGH
File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the start_import.php file.
Jan 11, 20247.230NONO
CVE-2023-24736CRITICAL
PMB v7.4.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /sauvegarde/restaure_act.php.
Mar 6, 20239.830NONO
CVE-2022-34328MEDIUM
PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see request to index.php.
Jun 23, 20226.130NOYES
CVE-2025-48744CRITICAL
In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.
May 27, 20259.829NONO
CVE-2025-48743CRITICAL
SIGB PMB before 8.0.1.2 allows SQL injection.
May 27, 20259.829NONO
CVE-2025-0471CRITICAL
Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access t
Jan 16, 20259.829NONO
CVE-2023-24737MEDIUM
PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950.php.
Mar 6, 20236.129NOYES
CVE-2023-24735MEDIUM
PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerability allows attackers to redirect victim users to an external
Mar 6, 20236.129NOYES
View all 23 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products23 CVEs
22%
30%
48%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network23 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low23 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None19 (82.6%)
Unknown0 (0.0%)
Required4 (17.4%)
Privileges Required
Low0 (0.0%)
High3 (13.0%)
None20 (87.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (23 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
4 CVEs
17.4% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Sigb.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Sigb — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Sigb's Products

View all 4 CNAs →

Top CWEs