Unscored CVE-2015-7774 EUVD-2015-7673GHSA-583h-mwfc-4vwm

PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by lever…

Published Nov 14, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role.

References

JVNDB-2015-000180 third-party-advisory
http://www.pwebmanager.org/
JVN#25323093 third-party-advisory