154 matches found
JAWS Glossary Gadget Multiple XSS
The remote host is running JAWS, a content management system written in PHP. The remote version of this software does not perform a proper validation of user-supplied input to several variables used in the 'GlossaryModel.php' script, and is, therefore, vulnerable to cross-site scripting attacks...
Jaws BlogModel.php path Parameter Remote File Inclusion
The remote host is running JAWS, a content management system written in PHP. The remote version of Jaws allows an attacker to include URLs remotely. This may allow for the execution of arbitrary code with the privileges of the web server. %NASLMINLEVEL 70300 This script was written by Josh...
CVE-2005-2179
CVE-2005-2179 describes a PHP remote file inclusion vulnerability in Jaws (BlogModel.php) affecting version 0.5.2 and earlier. The flaw allows an attacker to include URLs via the path parameter, enabling arbitrary PHP code execution on the web server. Affected software is the Jaws CMS written in ...
CVE-2005-2179
PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via the path parameter...
CVE-2005-2179: Undefined Security Weakness
PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via the path parameter...
Jaws 0.x - Remote File Inclusion
Jaws 0.x - Remote File Inclusion source: https://www.securityfocus.com/bid/14158/info JAWS is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
[Full-disclosure] Advisory 07/2005: Jaws Multiple Remote Code Execution Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Jaws Multiple Remote Code Execution Vulnerabilities Release Date: 2005/07/06 Last Modified: 2005/07/06 Author: Stefan Esser [email protected] Application: Jaws = 0.5.2...
Jaws 0.x - Remote File Inclusion
source: https://www.securityfocus.com/bid/14158/info JAWS is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected...
CVE-2005-1800
JAWS Glossary Gadget XSS (CVE-2005-1800) affects versions 0.4–0.5.1. The flaw stems from inadequate validation of user input in the GlossaryModel/view term handling for the term parameter to index.php, allowing remote script/HTML injection via XSS. Impact is web-based cross-site scripting; exploi...
CVE-2005-1800
Cross-site scripting XSS vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php...
jawsXSS.txt
Small XSS Bug in JAWS gadget: Glossary all versions vulnerable 0.3 - 0.5 latest beta beta2 STATUS: The vendor has been contacted and they fixed the bug but they havent released an official patch yet. You can find a provisional patch at the end of the file TECHNICAL INFO...
CVE-2005-1800: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php...
CVE-2005-1800
Cross-site scripting XSS vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php...
[Full-disclosure] XSS Bug in Jaws Glossary Action: ViewTerm ( v 0.4 - 0.5.1 (latest version))
XSS Bug in Jaws Glossary v 0.4 - 0.5.1 latest version STATUS: The vendor has been contacted, fixed in cvs. Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time...
Jaws Glossary 0.40.5 - Cross-Site Scripting
Jaws Glossary 0.40.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/13796/info JAWS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'Glossary' module. This may facilitate the thef...
Jaws Glossary 0.4/0.5 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/13796/info JAWS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'Glossary' module. This may facilitate the theft of cookie-based authentication credentials...
CVE-2004-2067
CVE-2004-2067: SQL injection in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to bypass authentication by injecting via the (1) user, (2) password, or (3) crypted_password parameters. Impact indicated as partial confidentiality/integrity/availability...
CVE-2004-2067
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the 1 user, 2 password, or 3 cryptedpassword parameters...
CVE-2004-2067: Undefined Security Weakness
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the 1 user, 2 password, or 3 cryptedpassword parameters...