Approved changes feed: RSS · Atom

cpe:2.3:h:magdesign:pocketvj_control_panel:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMagdesign (58b45c86-9e9d-5ea8-aec4-b74cd26a390d)
ProductPocketvj Control Panel (dd56af1c-422c-5ad4-8989-a476dc1c61a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-63334 not_vulnerable 2026-06-08 07:39:17.528853 Details available
PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execute arbitrary commands with root privileges on the underlying system.
Published: 2025-11-05T00:00:00.000Z
Updated: 2025-11-05T20:18:30.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45326 not_vulnerable 2026-06-08 07:25:10.985576 Details available
An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.php component.
Published: 2025-09-23T00:00:00.000Z
Updated: 2025-09-24T18:39:53.919Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.