Jcow

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jcow records in CISA KEV

No Jcow vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Jcow Cms · all components

TI-2011-02833 CVE-2011-3203 · GHSA-hfr2-w3w8-234q

MEDIUM 47

A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02402 Published 2020-01-14 No fix listed CWE-20

TI-2011-02832 CVE-2011-3202 · GHSA-r469-3mhm-hxr6

LOW 29

A Cross-Site Scripting (XSS) vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00804 Published 2020-01-14 No fix listed CWE-79