CVE-2011-3203

Name of the Vulnerable Software and Affected Versions Jcow CMS versions 4.x through 4.2 Jcow CMS versions 5.2

Description A Code Execution issue exists in the attachment parameter to "index.php" in Jcow CMS.

Recommendations For Jcow CMS versions 4.x through 4.2, avoid using the attachment parameter in the "index.php" endpoint until a fix is available. For Jcow CMS version 5.2, consider restricting access to the "index.php" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.