High severity7.2NVD Advisory· Published Dec 23, 2020· Updated Jun 17, 2026

CVE-2020-35656

Description

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of admin.php?reqGadget=Components&reqAction=InstallGadget&comp=FileBrowser and admin.php?reqGadget=FileBrowser&reqAction=Files to upload a .php file. NOTE: this is unrelated to the JAWS (aka Job Access With Speech) product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jaws/Jawsdescription
Jaws Project/jawsllm-create
Range: <=1.8.0

Patches

Vulnerability mechanics

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000