| Package | Affected versions | Patched versions |
|---|---|---|
| kpopup | = 0.9.1= 0.9.5_pre2 |
misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free