Code injection

2019-03-2519:29:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

JSON

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234.

CPENameOperatorVersion
internet_campus_solutioneq< 201926

CPE	Name	Operator	Version
	internet_campus_solution	eq	< 201926

References

medium.com/@mdavis332/higher-ed-erp-portal-vulnerability-create-your-own-accounts-d865bd22cdd8