Vulnerabilities

TI-2020-06771 CVE-2020-8434 · GHSA-xxqg-cq6p-jpqq

Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch…

MEDIUM 45

Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of the username.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01339 Published 2020-05-19 No fix listed CWE-384

TI-2019-07348 CVE-2019-10012 · GHSA-ppjq-m4gx-9pj8

Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload…

LOW 36

Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager (for .NET) plugin before 2.1.4 in the mox…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01592 Published 2019-03-25 No fix listed CWE-434

TI-2019-07347 CVE-2019-10011 · GHSA-rgc9-9cmm-xrf7

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before…

MEDIUM 46

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02143 Published 2019-03-25 No fix listed CWE-798

Vulnerabilities

Filters

Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch…

Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload…

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before…