Pheditor vulnerabilities
Products
- Pheditor 4
Newest
- pheditor Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise 9.8 Critical
- pheditor Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection 8.8 High
- pheditor Authenticated terminal command whitelist bypass in Pheditor 8.8 High
- pheditor Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78) 9.9 Critical