CVE-2013-3081 - SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /articles/test/

Back Back to CVE browser

HIGH

SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /articles/test/

Published Jun 9, 2014

7.5

HIGH

CVSS 2.0

EPSS 2.36%

Description

SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /articles/test/.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3019
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84285
vdb-entryx_refsource_XF
https://github.com/JojoCMS/Jojo-CMS/commit/972757c4500d94b4b1306bf092e678add3a987d8
x_refsource_CONFIRMExploitPatch
https://www.htbridge.com/advisory/HTB23153
x_refsource_MISCExploit

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3019		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84285		vdb-entryx_refsource_XF
https://github.com/JojoCMS/Jojo-CMS/commit/972757c4500d94b4b1306bf092e678add3a987d8		x_refsource_CONFIRMExploitPatch
https://www.htbridge.com/advisory/HTB23153		x_refsource_MISCExploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 9, 2014

Updated Aug 6, 2024

Reserved Apr 17, 2013

Link CVE-2013-3081

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-3081

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 9, 2014

Updated Aug 6, 2024

Link EUVD-2013-3019

GitHub

No data