CVE-2004-2067

Published: Jul 29, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the (1) user, (2) password, or (3) crypted_password parameters.

Affected (3)

Products: Jaws: Jaws

Jaws

1 product

Jaws

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Jaws Jaws	Version 0.2
Jaws Jaws	Version 0.3
Jaws Jaws	Version 0.4

References (12)

http://marc.info/?l=bugtraq&m=109116345930380&w=2

Source: cve@mitre.org

http://securitytracker.com/id?1010815

Source: cve@mitre.org

http://www.jaws.com.mx/index.php?gadget=blog&action=single_view&id=10

Source: cve@mitre.org

http://www.osvdb.org/8320

Source: cve@mitre.org

http://www.securityfocus.com/bid/10826

Source: cve@mitre.org

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16847

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109116345930380&w=2