Pocketvj Control Panel Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:magdesign:pocketvj_control_panel_firmware:3.9.1:*:*:*:*:*:*:*
part: o version: 3.9.1 update: *
| Vendor | Magdesign (58b45c86-9e9d-5ea8-aec4-b74cd26a390d) |
|---|---|
| Product | Pocketvj Control Panel Firmware (b1d930c6-302d-52b7-8f4c-650a15268bec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-63334 |
vulnerable | 2026-06-08 07:39:17.528262 |
Details available
PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execute arbitrary commands with root privileges on the underlying system.
Published: 2025-11-05T00:00:00.000Z
Updated: 2025-11-05T20:18:30.677Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45326 |
vulnerable | 2026-06-08 07:25:10.985033 |
Details available
An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.php component.
Published: 2025-09-23T00:00:00.000Z
Updated: 2025-09-24T18:39:53.919Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.