Vulnerabilidades do Magdesign Pocketvj Control Panel Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Magdesign Pocketvj Control Panel Firmware: 1 registro(s), com versões afetadas e correções.
cpe:2.3:o:magdesign:pocketvj_control_panel_firmware

CVE-2025-63334 Crítica · 9.8 CWE-78 05/11/2025

OS Command Injection em Magdesign Pocketvj Control Panel Firmware

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execute arbitrary commands with root privileges on the underlying system.