CVE-2013-3081
jojo-cms < 1.2.2 - SQL Injection via X-Forwarded-For Header
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-3081. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in Jojo CMS 1.2 via the X-Forwarded-For header, allowing an attacker to write arbitrary files to the server. The payload uses SQL syntax to write a file to the web directory, potentially leading to remote code execution.
Description
SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /articles/test/.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in Jojo CMS 1.2 via the X-Forwarded-For header, allowing an attacker to write arbitrary files to the server. The payload uses SQL syntax to write a file to the web directory, potentially leading to remote code execution.