Jalios JCMS 10 Backdoor Account / Authentication Bypass Vulnerabilities

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. Jalios JCMS 10 Backdoor Account / Authentication Bypass Vulnerabilities I. VULNERABILITY...

CVE-2019-19033

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...

CVE-2019-19033

CVE-2019-19033 affects Jalios JCMS 10. The webdav authentication can be bypassed via a backdoor account using any username and a hardcoded dev password, granting administrative access to the site and WebDAV server. The vulnerability stems from insecure handling in the DevTools plugin (DevToolsAut...