Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

jenzabar CVEs

Beta · best-effort

5 CVEs tagged to vendor jenzabar — 2 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2021-26723

Published Feb 6, 2021

Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-8434

Published May 19, 2020

Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2019-10012

Published Mar 25, 2019

Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2019-10011

Published Mar 25, 2019

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a passwo…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-16778

Published Dec 21, 2018

Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Fi…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1