CVE-2020-35657

CVE-2020-35657 affects Jaws CMS up to version 1.8.0. An authenticated administrator can upload a theme ZIP via UploadTheme that contains a malicious .php file, enabling execution of OS commands on the server. The vulnerability is a remote code execution issue arising from handling of uploaded the...

PT-2020-17377

Name of the Vulnerable Software and Affected Versions Jaws versions 1.8.0 and earlier Description The issue allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme to upload a theme ZIP archive containing a .php file that is able to execute OS commands...

CVE-2020-35657: Unrestricted Upload of File with Dangerous Type

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme to upload a theme ZIP archive containing a .php file that is able to execute OS commands. NOTE: this is unrelated to the JAWS aka Job Access With Speech product...