Skip to content
OpenAdvisories

Product · wisdom

Pegasus CMS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-25687

    Pegasus CMS 1.0 Remote Code Execution via extra_fields.php

    Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by exploiting unsafe eval functionality. Attackers can send POST requests to the submit.php endpo…

    wisdom Pegasus CMS