Code injection

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS aka Internet Campus Solution before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234...

CVE-2019-10012

CVE-2019-10012 affects Jenzabar JICS (Internet Campus Solution) prior to version 9. An attacker can upload and execute arbitrary .aspx code by placing it in a ZIP archive and leveraging the MoxieManager (for .NET) plugin before 2.1.4 in the installation’s ICS\ICS.NET\ICSFileServer directory. The ...

CVE-2019-10011

CVE-2019-10011 affects Jenzabar JICS (Internet Campus Solution): ICS/StaticPages/AddTestUsers.aspx allows remote account creation with a password of 1234 prior to 2019-02-06. Connected sources (Red Hat, NVD, CVE lists) corroborate the same description. The documentation does not provide a patch v...