Skip to content
OpenAdvisories

Vendor

wisdom

1 known vulnerabilities.

Products

Pegasus CMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-25687

    Pegasus CMS 1.0 Remote Code Execution via extra_fields.php

    Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by exploiting unsafe eval functionality. Attackers can send POST requests to the submit.php endpo…

    wisdom Pegasus CMS