CVE-2004-2067: Jaws

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the (1) user, (2) password, or (3) crypted_password parameters.

Affected products

  • Jaws Jaws: version 0.2 only; version 0.3 only; version 0.4 only

Published 2004-07-29. Last modified 2026-06-16.