A path traversal vulnerability in PMB 5.6 allows unauthenticated attackers to access sensitive system files, posing a high risk of information disclosure.

The application fails to sanitize the chemin parameter within the getgif.php endpoint, which enables a path traversal attack. This flaw allows an unauthenticated user to read sensitive files from the underlying server filesystem, such as /etc/passwd.

Successful exploitation of this vulnerability allows unauthorized access to sensitive configuration files, credentials, or system data. Given the CVSS score of 8.4, this vulnerability is classified as High severity because it provides unauthenticated access to potentially critical information, which can lead to further system compromise or complete host takeover.

Immediate Action: Upgrade to the latest version of PMB provided by the vendor to ensure the getgif.php file is patched against path traversal.

Proactive Monitoring: Review web server access logs for requests to getgif.php that contain directory traversal sequences, such as dot-dot-slash patterns.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and block requests containing directory traversal sequences directed at the getgif.php endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists as documented on ExploitDB (EDB-ID 49054).

The vulnerability presents a significant risk due to the ease of exploitation and the potential for total information disclosure. Administrators should prioritize upgrading the PMB installation immediately to remove the vulnerable code path. If an immediate upgrade is not feasible, restrict network access to the getgif.php endpoint as a temporary protective measure.