JAOW 2.4.8 Cross Site Scripting

Script Name : JAOW 2.4.8 Version : 2.4.8 Bug Type : XSS vulnerability Found by : Metropolis Home : http://metropolis.fr.cr Discovered : 23/03/2013 Download app : http://www.jaow.net/uploads/jaow2.4.8.zip Google search : Propulsé par Jaow 2.4.8 - PoC : http://target/path/addons.php?addons=Xss...

PT-2012-4388

Name of the Vulnerable Software and Affected Versions Jaow versions 2.4.5 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the add ons parameter in the "add ons.php" file. Recommendations For Jaow versions 2.4.5 and earlier, at the...