In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.
https://www.sigb.net/index.php?lvl=cmspage&pageid=6&id_rubrique=553&opac_view=1
https://forge.sigb.net/projects/pmb/wiki/Changelog_801#CHANGE-LOG-8012-2025-03-03