JA
Product
Jaws
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Jaws to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-0645 | – | Feb 18 | Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a Affected: 0.8.8 |
| CVE-2006-3292 | – | Jun 28 | SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata… Affected: 0.6.2 |
| CVE-2005-3955 | – | Dec 1 | Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to… Affected: 0.6.2 |
| CVE-2005-2179 | – | Jul 11 | PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via the path parameter Affected: 0.5.0; 0.5.0_beta1; 0.5.0_beta2; 0.5.1; 0.5.2 |
| CVE-2005-1231 | – | May 2 | Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the (1) term… Affected: 0.3; 0.4; 0.5_beta2 |
| CVE-2004-2445 | – | Dec 31 | Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a Affected: 0.3_beta |
| CVE-2004-2444 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter Affected: 0.3 |
| CVE-2004-2443 | – | Dec 31 | Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared… Affected: 0.2; 0.3 |
| CVE-2004-2067 | – | Jul 29 | SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via… Affected: 0.2; 0.3; 0.4 |
Showing 9
