Design/Logic Flaw

PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role...

CVE-2015-7774

PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role...

PT-2015-7603

Name of the Vulnerable Software and Affected Versions PC-EGG pWebManager versions prior to 3.3.10 PC-EGG pWebManager version 2.2.2 for PHP 4.x Description The issue allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role. Recommendations For PC-EGG...

CVE-2015-7774: Improper Neutralization of Special Elements used in an OS Command

PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role...

WordPress 3.1.3 - SQL Injection Vulnerabilities

No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20110701-0 ======================================================================= title: Multiple SQL Injection Vulnerabilities product: WordPress vulnerable version: 3.1.3/3.2-RC1 and probably earlier versions...

Cross site scripting

The mapmetacap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not properly assign the unfilteredhtml capability, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting X...

WordPress 3.1.3 SQL Injection Vulnerabilities

Exploit for php platform in category web applications title: Multiple SQL Injection Vulnerabilities product: WordPress vulnerable version: 3.1.3/3.2-RC1 and probably earlier versions fixed version: 3.1.4/3.2-RC3 impact: Medium homepage: http://wordpress.org/ found: 2011-06-21 by: K. Gudinavicius...