Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Jmk Web Scripts records in CISA KEVNo Jmk Web Scripts vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 36
JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admin_gallery.php3, possibly related to the add action.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01767 · Published 2006-05-01 · No fix listed
