VYPR
← All advisories
High severity7.2NVD Advisory· Published Dec 23, 2020· Updated Jun 17, 2026

CVE-2020-35656

CVE-2020-35656

Description

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of admin.php?reqGadget=Components&reqAction=InstallGadget&comp=FileBrowser and admin.php?reqGadget=FileBrowser&reqAction=Files to upload a .php file. NOTE: this is unrelated to the JAWS (aka Job Access With Speech) product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Jaws Project/jaws2 versions
    cpe:2.3:a:jaws_project:jaws:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:jaws_project:jaws:*:*:*:*:*:*:*:*range: <=1.8.0
    • (no CPE)range: <=1.8.0
  • Jaws/Jawscpe-rescue

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.