Advisories · Technology
jackq XCMS.
Every CVE that names jackq XCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
jackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injection
- jackq XCMS
- Other injection
- SQL injection
- CVSS 5.1 Medium
jackq XCMS Backend ProductImageController.class.php upload unrestricted upload
- jackq XCMS
- Broken access control
- Unrestricted file upload
- CVSS 6.9 Medium
jackq XCMS upload.php unrestricted upload
- jackq XCMS
- Broken access control
- Unrestricted file upload