87 matches found
CVE-2019-19033
Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...
CVE-2019-19033
CVE-2019-19033 affects Jalios JCMS 10. The webdav authentication can be bypassed via a backdoor account using any username and a hardcoded dev password, granting administrative access to the site and WebDAV server. The vulnerability stems from insecure handling in the DevTools plugin (DevToolsAut...
CVE-2019-19033: Use of Hard-coded Credentials
Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...
PT-2019-15764
Name of the Vulnerable Software and Affected Versions Jalios JCMS version 10 Description The issue allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account. This is achieved by using any username and a hardcoded dev password...
Exploit for Use of Hard-coded Credentials in Jalios Jcms
CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authenticati...
Dahan jcms /jcms/jcms_files/jcms1/web1/site/module/comment/opr_ballot. jsp parameters c_uuid time blind
No description provided by source...
大汉JCMS /xxgk/workflow/design/que_model.jsp 多个参数SQL注入
No description provided by source...
大汉JCMS /short_message/que_contact.jsp 等3处SQL注入
No description provided by source...
大汉 (JCMS)的opr_getcount.jsp的两处注入（
No description provided by source...
大汉JCMS政务系统 opr_ballot.jsp 参数c_uuid SQL注入漏洞
No description provided by source...
jcms系统session重置导致getshell
简要描述： 详细说明： jcms系统session重置导致getshell 在/jcms/jcmsfiles/jcms1/web1/site/module/oss/quecode.jsp String sessionId = request.getParameter"sessionid"; 直接通过sessionid获取值 code1.setSessionNamesessionId; 然后又直接设置session 而在我们的jcms中的setup后台管理制作端中又只判断其中cookieusername是否为空 不为空即就登录 可参考如下：...
大汉 jcms m_5_7/replace/export.jsp 任意文件下载漏洞
No description provided by source...
jcms /interface/user/out_userinfo.jsp 文件 xmlinfo 参数敏感信息泄漏漏洞
No description provided by source...
JCMS在/jcms/interface/user/out_userinfo.jsp存在信息泄漏漏洞
No description provided by source...
JCMS政府信息公开系统在/lm/front/reg_2.jsp存在本地文件包含漏洞
No description provided by source...
JCMS政务系统在/lm/front/mailwrite_over.jsp页面存在任意文件遍历漏洞
No description provided by source...
JCMS政府信息公开系统在/lm/front/noontimelist.jsp存在SQL注入漏洞
No description provided by source...
大汉网络 JCMS que_style_coltop.jsp SQL注入漏洞
No description provided by source...