Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Ujcms Subscribe
Filtered by product Jspxcms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-28090 1 Ujcms 1 Jspxcms 2022-05-12 6.4 MEDIUM 6.5 MEDIUM
Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.
CVE-2022-23329 1 Ujcms 1 Jspxcms 2022-02-08 7.5 HIGH 9.8 CRITICAL
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.