Jumbo Website Manager - Remote Code Execution

60% confidence

Description

The Jumbo Website Manager version 1.3.7 is vulnerable to Remote Code Execution (RCE) due to improper handling of file uploads, allowing an attacker to upload a malicious PHP file and execute arbitrary code on the server.

Affected Products

Vendor	Product	Versions
jumbo	jumbo website	v1.3.7

Related News (1 articles)

Tier C

Exploit-DB22h ago

[webapps] Jumbo Website Manager - Remote Code Execution

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

CWECWE-434

PublishedApr 9, 2026

Last enriched5h ago

Community Vote

0 upvotes0 downvotes

No votes yet

Jumbo Website Manager - Remote Code Execution

Description

Affected Products

Related News (1 articles)

Community Vote

Pin to Dashboard

Verification

Vulnerability Timeline