Jaws Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Jaws Project records in CISA KEV

No Jaws Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jaws 2 records LOW

Records

2 records in Jaws · all components

TI-2020-18134 CVE-2020-35657 · GHSA-qq9r-5mv8-w3px

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code…

LOW 36

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme to upload a theme ZIP archive containing a .php file that is able to execute OS commands.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02507 Published 2020-12-23 No fix listed CWE-434

TI-2020-18133 CVE-2020-35656 · GHSA-5rj7-m957-87g6

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code…

LOW 36

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of admin.php?reqGadget=Components&reqAction=InstallGadget&comp=FileBrowser and admin.php?reqGadget=FileBrowser&reqAc…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02507 Published 2020-12-23 No fix listed CWE-434

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0