Backdoor Account Vulnerability in Jalios JCMS by Jalios
CVE-2019-19033
9.8CRITICAL
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2019-19033?
The vulnerability in Jalios JCMS version 10 allows attackers to exploit a backdoor account, granting them administrative access to all areas of the website and the WebDAV server. This is achievable using any username alongside a hardcoded developer password, posing significant risks to the security and integrity of the application. Immediate action is advisable to mitigate unauthorized access.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.