critical9.8
CVE-2020-26772
Command Injection in PPGo_Jobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun()' function.
Impact
Command Injection in PPGo_Jobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun()' function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ppgo Jobs Project | Ppgo Jobs | Version 2.8.0 |