CVE-2019-19033

PoC —

CVSS 3.1

9.8 critical

EPSS

3%p88

Published

Nov 21, 2019 (Nov 21, 2019)

Modified

Jun 17, 2026

Description

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password.

Vendors: jalios
Products: jcms
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news0 stories

No ingested article mentions this CVE yet.