CVE-2012-2952

Jaow 2.4.5 and earlier are affected by a SQL injection in add_ons.php via the add_ons parameter. The vulnerability is remote and allows arbitrary SQL execution. Root cause: unsafe handling/input validation in the add_ons parameter. Public advisories/exploits exist (e.g., exploit-db, Secunia, X-Fo...

CVE-2012-2952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in addons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the addons parameter...

Jaow 2.4.5 Blind SQL Injection

Exploit Title: Jaow = 2.4.5 Blind Sql Injection Google Dork: intext:"propuls� par jaow 2.4.5" Date: 23/05/2012 Software Link: http://www.jaow.net/telechargements/JaowV2.4.5.zip Version: 2.4.5 Tested on: Debian GNU/Linux Author: kallimero = Introduction = Jaow is a CMS that can manage sites of sma...