CVE-2013-3081

Summary: CVE-2013-3081 affects Jojo CMS prior to 1.2.2, where the checkEmailFormat function in Jojo.php allows SQL injection via the X-Forwarded-For header sent to /articles/test/. This enables remote, unauthenticated attackers to execute arbitrary SQL commands. The issue is documented in multipl...

CVE-2013-3082

CVE-2013-3082 is a cross-site scripting (XSS) vulnerability affecting Jojo CMS prior to 1.2.2, specifically in the forgot_password.php path used by the forgot-password/ flow. The issue arises from insufficient input sanitization of the search parameter, allowing a remote attacker to inject arbitr...