EUVD-2020-19308

Malware in sbrugna...

CVE-2020-26772

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2024-36691

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

CVE-2024-36691

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

CVE-2024-36691

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

CVE-2024-36691: Insecure Inherited Permissions

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

CVE-2024-36691

The PPGo_Jobs task management system (version v2.8.0 ) is vulnerable to an insecure privilege issue within the AdminController.AjaxSave() method. This flaw allows authenticated attackers to arbitrarily modify users' account information. While technical details regarding specific remediation or pr...

CVE-2020-26772

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2020-26772

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

Command injection

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2020-26772

CVE-2020-26772 affects PPGo_Jobs v2.8.0. A command injection vulnerability exists in the AjaxRun() function, enabling remote attackers to execute arbitrary code. CVSS metrics indicate a high likelihood of impact (C/H/I/A high; network access; no user interaction required). The vulnerability is ev...

CVE-2020-26772

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2020-26772: Improper Neutralization of Special Elements used in an OS Command

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

PPGo_Job: Operating System Command Injection Vulnerability

PPGoJobs is a lightweight timed task management system, go language development, super easy to deploy, low resource consumption, stable operation. An operating system command injection vulnerability exists in PPGoJobs v2.8.0, which allows remote attackers to execute arbitrary code via the AjaxRun...