Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability

Product & Service Introduction: =============================== Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time is Developer Friendly, it offers a simple...

Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability

Document Title: =============== Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1923 Release Date: ============= 2016-09-09 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability

Document Title: =============== Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1923 Release Date: ============= 2016-09-08 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Jaws CMS 1.1.1 Cross Site Request Forgery

Document Title: =============== Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1923 Release Date: ============= 2016-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Jaws 1.1.1 Cross Site Request Forgery

Affected software: Jaws cms Type of vulnerability:csrf URL:http://www.opensourcecms.com/scripts/details.php?scriptid=38&name=Jaws Discovered by: provensec Website: provensec.com version: Jaws 1.1.1 Proof of concept Jaws...

JAWS 0.x Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14158/info JAWS is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

JAWS 0.2/0.3 Cookie Manipulation Authentication Bypass

No description provided by source. source: http://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-sit...

JAWS 0.2/0.3 index.php gadget Parameter Traversal Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-sit...

JAWS 0.2/0.3/0.4 ControlPanel.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10826/info JAWS is reportedly affected by a remote SQL injection vulnerability. This issue occurs in the controlpanel.php script due to a failure of the application to properly sanitize user-supplied URI parameter input...

Jaws <= 0.6.2 (Search gadget) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Jaws = 0.6.2 'Search gadget' SQL injection / admin credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \powered by jaws\ | \powered by the jaws...

Jaws <= 0.5.2 (include/JawsDB.php) Remote File Include Vulnerability

No description provided by source. ToXiC Jaws 0.5.2: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: jaws 0.5.2 Sorce Code: http://forge.novell.com/modules/xfcontent/private.php/jaws/jaws-0.5.2/jaws-0.5.2.tar.gz Page: JawsDB.php Problem:...

JAWS 0.2/0.3 index.php action Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-sit...

JAWS Glossary 0.4/0.5 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13796/info JAWS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'Glossary' module. This may facilitate the theft of...

Jaws 0.8.8 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. Jaws 0.8.8 Local File Inclusion POST /upgrade/index.php language=../../../../../../../../../../../../etc/passwd%00 POST /install/index.php language=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: Introductioncomplete uselog Author notified: Ja...

Jaws 0.8.14 - Multiple Remote File Inclusions

Jaws 0.8.14 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/50022/info Jaws is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtai...

Jaws 0.8.14 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50022/info Jaws is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or execute arbitrary...

Jaws 0.8.14 Remote File Inclusion

================================ Jaws 0.8.14 Mullti Vulnerability ================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0 '---' --' --' ' -'--'---| 1 1 ; 0 0 Site : 1337day.com -' 1 1...

XSS vulnerability in Jaws

Vulnerability ID: HTB22357 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinjaws.html Product: Jaws Vendor: Jaws Project Vulnerable Version: 0.8.12 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

Jaws 0.8.12 Cross Site Scripting

Vulnerability ID: HTB22357 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinjaws.html Product: Jaws Vendor: Jaws Project Vulnerable Version: 0.8.12 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

XSS vulnerability in Jaws

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Jaws which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Jaws The vulnerability exists due to input sanitation error in the "url" parameter in the "edit profile"...