CVE-2020-35656

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of admin.php?reqGadget=Components=InstallGadget∁=FileBrowser and admin.php?reqGadget=FileBrowser=Files to upload a .php file. NOTE: this is unrelated to the JAWS aka Job Access With Speech...

CVE-2020-35656

CVE-2020-35656 affects Jaws (CMS) up to version 1.8.0. The vulnerability arises from crafted requests to admin.php?reqGadget=Components&reqAction=InstallGadget&comp=FileBrowser and admin.php?reqGadget=FileBrowser&reqAction=Files, which allow an authenticated administrator to upload a .php file an...