Vulnerabilities

TI-2020-13922 CVE-2020-20735 · GHSA-f2fm-6xq7-v8j8

File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute…

MEDIUM 51

File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.php parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01053 Published 2023-06-20 No fix listed CWE-434

TI-2020-14018 CVE-2020-21237 · GHSA-qmgf-hqxv-72p7

MEDIUM 44

An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01129 Published 2021-12-27 No fix listed CWE-307

TI-2020-13958 CVE-2020-20979 · GHSA-r2wm-99x8-326h

MEDIUM 45

An arbitrary file upload vulnerability in the move_uploaded_file() function of LJCMS v4.3 allows attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01603 Published 2021-08-12 No fix listed CWE-434

TI-2020-13875 CVE-2020-20583 · GHSA-8cg4-mchh-phhh

LOW 35

A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01254 Published 2021-07-08 No fix listed CWE-89