Jcow

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jcow records in CISA KEV

No Jcow vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jcow Cms 2 records MEDIUM Jcow 1 record LOW

Records

3 records

TI-2011-02833 CVE-2011-3203 · GHSA-hfr2-w3w8-234q

A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2.

MEDIUM 47

A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02402 Published 2020-01-14 No fix listed CWE-20

TI-2011-02832 CVE-2011-3202 · GHSA-r469-3mhm-hxr6

A Cross-Site Scripting (XSS) vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier.

LOW 29

A Cross-Site Scripting (XSS) vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00804 Published 2020-01-14 No fix listed CWE-79

TI-2011-03303 CVE-2011-3746 · GHSA-fwpc-26q4-5xg7

Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request…

LOW 26

Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/page.tpl.php and certain…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0