Filtered by vendor Magdesign Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-63334 1 Magdesign 2 Pocketvj Control Panel, Pocketvj Control Panel Firmware 2025-11-06 9.8 Critical
PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execute arbitrary commands with root privileges on the underlying system.
CVE-2025-45326 1 Magdesign 2 Pocketvj Control Panel, Pocketvj Control Panel Firmware 2025-10-17 6.5 Medium
An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.php component.