Skip to content
OpenAdvisories

Vendor

jizhiCMS

1 known vulnerabilities.

Products

jizhiCMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2020-37117

    jizhiCMS 1.6.7 - Arbitrary File Download

    jizhiCMS 1.6.7 contains a file download vulnerability in the admin plugins update endpoint that allows authenticated administrators to download arbitrary files. Attackers can exploit the vulnerability by sending crafted POST requests with malicious filepath a…

    jizhiCMS jizhiCMS