CVE-2015-7774 PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role.
MediumCVSS 6.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pc-egg pwebmanager | <= 3.3.9a | No fix listed |
| pc-egg pwebmanager | <= 2.2.2 | No fix listed |
References
- JVN#25323093 third-party-advisory vendor-advisory
- JVNDB-2015-000180 third-party-advisory vendor-advisory
- www.pwebmanager.org patch vendor-advisory