CVE-2019-10012: Jenzabar Internet Campus Solution

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager (for .NET) plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer.

Affected products

• Jenzabar Internet Campus Solution: version 9 only
• Tiny Moxiemanager: before 2.1.4 (fixed in 2.1.4)

Published 2019-03-25. Last modified 2026-06-17.