154 matches found
CVE-2006-3292
SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter search field...
CVE-2006-3292: Undefined Security Weakness
SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter search field...
Jaws <= 0.6.2 (Search gadget) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== Jaws = 0.6.2 Search gadget Remote SQL Injection Exploit ========================================================== !/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search...
Jaws 0.6.2 - Search gadget SQL Injection
!/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search gadget' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by jaws" | "powered by the jaws project" |...
Jaws 0.6.2 - Search gadget SQL Injection
Jaws 0.6.2 - Search gadget SQL Injection !/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search gadget' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by jaws" | "powered by...
Jaws <= 0.6.2 (Search gadget) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search gadget' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by jaws" | "powered by the...
JAWS HTML injection vulnerabilities
The remote version of JAWS does not perform a proper validation of user-supplied input to several variables used in the SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
File Inclusion Vulnerability in Jaws
The remote host is running JAWS, a content management system written in PHP. The remote version of Jaws allows an attacker to include URLs remotely. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2005-3955
Multiple cross-site scripting XSS vulnerabilities in MagpieRSS 7.1, as used in a blogBuddiesv 0.3, b Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and 2 rssurl parameter to b magpieslashbox.php a...
CVE-2005-3955: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in MagpieRSS 7.1, as used in a blogBuddiesv 0.3, b Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and 2 rssurl parameter to b magpieslashbox.php a...
CVE-2004-2445
Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. dot dot in the gadget parameter...
CVE-2004-2443
The CVE affects Jaws 0.3. An authentication bypass is possible via an HTTP request to admin.php where the cookie is set to the MD5 hash of a null password; this is compared against the logged session variable in application.php’s logged_on function. This yields a likely auth bypass with partial c...
CVE-2004-2444
CVE-2004-2444 describes a cross-site scripting (XSS) flaw in index.php of Jaws 0.3, exploitable via the action parameter to inject arbitrary script/HTML. The provided documents do not include explicit vendor/version patches or a confirmed exploit in the wild. No additional technical details, root...
CVE-2004-2443
Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the loggedon function in application.php...
CVE-2004-2444
Cross-site scripting XSS vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2004-2445
CVE-2004-2445: Directory traversal in Jaws 0.3 BETA index.php via the gadget parameter allows remote attackers to view arbitrary files using dot-dot sequences. This is documented in multiple sources (NVD/CVE records and Nessus-like disclosures) and confirms a file-read vulnerability in the early ...
CVE-2004-2443: Undefined Security Weakness
Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the loggedon function in application.php...
CVE-2004-2445: Undefined Security Weakness
Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. dot dot in the gadget parameter...
CVE-2004-2444: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
jawsGlossary.txt
XSS Bug in Jaws Glossary v 0.4 - 0.5.1 latest version STATUS: The vendor has been contacted, fixed in cvs. Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time...