Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Jean Charles Component: Jbc Explorer Clear all filters
TI-2007-05653 CVE-2007-5914 · GHSA-xc2j-r478-f27m

Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC…

Priority LOW 38

Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows remote authenticated administrators to inject arbitrary PHP code via the DEBUG parameter, which can…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05432 Published 2007-11-10 No fix listed CWE-94
TI-2007-05652 CVE-2007-5913 · GHSA-g29r-hmvv-w2p4

dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require…

Priority MEDIUM 40

dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attackers to (1) delete auth.inc.php via the suppr parameter, and (2) re-create the auth.inc.php file with…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07255 Published 2007-11-10 No fix listed CWE-287