Jtbc

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Jtbc records in CISA KEV

No Jtbc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jtbc Php 9 records MEDIUM Jtbc 1 record LOW

Records

10 records

TI-2018-12678 CVE-2018-17836 · GHSA-r975-467j-wrpw

An issue was discovered in JTBC(PHP) 3.0.1.6.

MEDIUM 41

An issue was discovered in JTBC(PHP) 3.0.1.6.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01594 Published 2018-10-01 No fix listed CWE-22

TI-2018-13844 CVE-2018-19546 · GHSA-m88q-m3h8-4mrg

JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as…

LOW 39

JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00544 Published 2018-11-26 No fix listed CWE-352

TI-2018-13693 CVE-2018-19327 · GHSA-fg5r-5vwx-rpph

An issue was discovered in JTBC(PHP) 3.0.1.7.

LOW 39

An issue was discovered in JTBC(PHP) 3.0.1.7.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00494 Published 2018-11-17 No fix listed CWE-352

TI-2018-13036 CVE-2018-18436 · GHSA-m9mc-xjfr-35jj

JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.

LOW 39

JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00513 Published 2018-10-17 No fix listed CWE-352

TI-2018-12421 CVE-2018-17429 · GHSA-fh7r-mvc8-vp82

/console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an administrator account.

LOW 39

/console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an administrator account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00614 Published 2019-03-07 No fix listed CWE-352

TI-2019-07073 CVE-2019-9662 · GHSA-6344-7cjx-cf3p

An issue was discovered in JTBC(PHP) 3.0.1.8.

LOW 36

An issue was discovered in JTBC(PHP) 3.0.1.8.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01678 Published 2019-03-11 No fix listed CWE-22

TI-2018-12680 CVE-2018-17838 · GHSA-4r79-xrp7-h86m

An issue was discovered in JTBC(PHP) 3.0.1.6.

LOW 36

An issue was discovered in JTBC(PHP) 3.0.1.6.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01515 Published 2018-10-01 No fix listed CWE-22

TI-2019-06050 CVE-2019-8433 · GHSA-px7c-jj68-w4g3

JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the…

LOW 35

JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01184 Published 2019-02-18 No fix listed CWE-434

TI-2018-12679 CVE-2018-17837 · GHSA-rwc8-699j-7phx

An issue was discovered in JTBC(PHP) 3.0.1.6.

LOW 35

An issue was discovered in JTBC(PHP) 3.0.1.6.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01266 Published 2018-10-01 No fix listed CWE-22

TI-2018-13845 CVE-2018-19547 · GHSA-8cfq-2x94-5fqr

JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter.

LOW 29

JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0073 Published 2018-11-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	9
Medium	1
Low	0
No CVSS	0