CVE-2019-19033

CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authentication Bypass I. VULNERABILITY Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. II. CVE REFERENCE...

EUVD-2020-7490

Malware in sbrugna...

EUVD-2019-8675

Malware in sbrugna...

CVE-2020-15497

jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS...

CVE-2019-19033

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...

Jalios JCMS Cross-Site Scripting Vulnerability

Jalios JCMS is a suite of integrated enterprise information management solutions from Jalios, a French company. The product includes enterprise social networking, social learning, document management and content management systems. A cross-site scripting vulnerability exists in the...

CVE-2020-15497

jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS...

CVE-2020-15497

jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS...

Design/Logic Flaw

jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS...

CVE-2020-15497

jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS...

CVE-2020-15497

jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS...

CVE-2020-15497

CVE-2020-15497 affects Jalios JCMS 10.0.2 build-20200224104759. The vulnerability exists in jcore/portal/ajaxPortal.jsp where the types parameter enables cross-site scripting. Descriptions note the issue is not present in the standard installation of Jalios JCMS. Connected sources (PT-2020-14459)...

PT-2020-14459 · Jalios · Jalios Jcms

Name of the Vulnerable Software and Affected Versions: Jalios JCMS version 10.0.2 build-20200224104759 Description: The issue allows for XSS via the types parameter in the jcore/portal/ajaxPortal.jsp file. It is noted that this issue is not present in the standard installation of Jalios JCMS...

CVE-2020-15497: Improper Neutralization of Input During Web Page Generation

jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS...

Jalios JCMS Authentication Bypass Vulnerability

Jalios JCMS is a suite of integrated enterprise information management solutions from Jalios, a French company. The product includes enterprise social networking, social learning, document management and content management systems. A security vulnerability exists in Jalios JCMS version 10. The...

Jalios JCMS 10 Backdoor Account / Authentication Bypass Vulnerabilities

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. Jalios JCMS 10 Backdoor Account / Authentication Bypass Vulnerabilities I. VULNERABILITY...

CVE-2019-19033

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...

CVE-2019-19033

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...

CVE-2019-19033

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...

Hardcoded credentials

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...