Command Injection

github.com/george518/ppgojob is vulnerable to command injection. An attacker is able to inject and execute malicious code via the 'AjaxRun' function...

Command injection

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2020-26772

CVE-2020-26772 affects PPGo_Jobs v2.8.0. A command injection vulnerability exists in the AjaxRun() function, enabling remote attackers to execute arbitrary code. CVSS metrics indicate a high likelihood of impact (C/H/I/A high; network access; no user interaction required). The vulnerability is ev...

CVE-2020-26772

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

CVE-2020-26772: Improper Neutralization of Special Elements used in an OS Command

Command Injection in PPGoJobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun' function...

PT-2021-11271

Name of the Vulnerable Software and Affected Versions: PPGo Jobs version 2.8.0 Description: The issue allows remote attackers to execute arbitrary code via the AjaxRun function. This enables attackers to inject commands, potentially leading to unauthorized access or control. Recommendations: For...

PPGo_Job: Operating System Command Injection Vulnerability

PPGoJobs is a lightweight timed task management system, go language development, super easy to deploy, low resource consumption, stable operation. An operating system command injection vulnerability exists in PPGoJobs v2.8.0, which allows remote attackers to execute arbitrary code via the AjaxRun...