CVE-2024-36691

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

PT-2024-27130

Name of the Vulnerable Software and Affected Versions PPGo Jobs version 2.8.0 Description The issue is related to insecure permissions in the AdminController.AjaxSave method, allowing authenticated attackers to arbitrarily modify users' account information. Recommendations For PPGo Jobs version...

PT-2021-11271

Name of the Vulnerable Software and Affected Versions: PPGo Jobs version 2.8.0 Description: The issue allows remote attackers to execute arbitrary code via the AjaxRun function. This enables attackers to inject commands, potentially leading to unauthorized access or control. Recommendations: For...