CVE-2012-2952

Jaow 2.4.5 and earlier are affected by a SQL injection in add_ons.php via the add_ons parameter. The vulnerability is remote and allows arbitrary SQL execution. Root cause: unsafe handling/input validation in the add_ons parameter. Public advisories/exploits exist (e.g., exploit-db, Secunia, X-Fo...

Jaow 2.4.5 Blind SQL Injection

Exploit Title: Jaow = 2.4.5 Blind Sql Injection Google Dork: intext:"propuls� par jaow 2.4.5" Date: 23/05/2012 Software Link: http://www.jaow.net/telechargements/JaowV2.4.5.zip Version: 2.4.5 Tested on: Debian GNU/Linux Author: kallimero = Introduction = Jaow is a CMS that can manage sites of sma...