CVE-2015-7774

MEDIUM 6.5 CVSS 2.0

Published: November 14, 2015
Last modified: June 17, 2026
NVD status: Modified
Reported by: vultures@jpcert.or.jp
Weakness: CWE-78
CVSS vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role.

References

jvn.jp http://jvn.jp/en/jp/JVN25323093/index.html Vendor Advisory
jvndb.jvn.jp http://jvndb.jvn.jp/jvndb/JVNDB-2015-000180 Vendor Advisory
www.pwebmanager.org http://www.pwebmanager.org/ Patch, Vendor Advisory
nvd.nist.gov Official NVD record

PHP CVEs

Description

References