CVE-2007-0629: Plain Black Webgui

Medium severity, CVSS 6.4. EPSS: 1.4% chance of exploitation in the next 30 days.

The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unauthorized assets. NOTE: some of these details are obtained from third party information.

Affected products

• Plain Black Webgui: version 7.3.8 only

Published 2007-01-31. Last modified 2026-06-16.