ID de Prueba:	1.3.6.1.4.1.25623.1.0.803703
Categoría:	Web application abuses
Título:	Jojo CMS Multiple Vulnerabilities
Resumen:	Jojo CMS is prone to multiple vulnerabilities.
Descripción:	Summary: Jojo CMS is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws due to: - An insufficient filtration of user-supplied input passed to the 'X-Forwarded-For' HTTP header in '/articles/test/' URI. - An insufficient filtration of user-supplied data passed to 'search' HTTP POST parameter in '/forgot-password/' URI. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary SQL commands and execute arbitrary HTML and script code in a user's browser session in the context of an affected website. Affected Software/OS: Jojo CMS version 1.2 and prior Solution: Update to Jojo CMS 1.2.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-3081 https://www.htbridge.com/advisory/HTB23153 XForce ISS Database: jojocms-cve20133081-sql-injection(84285) https://exchange.xforce.ibmcloud.com/vulnerabilities/84285 Common Vulnerability Exposure (CVE) ID: CVE-2013-3082 XForce ISS Database: jojocms-cve20133082-xss(84286) https://exchange.xforce.ibmcloud.com/vulnerabilities/84286
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.