CVE-2012-2952: Jaow

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the add_ons parameter.

Affected products

• Jaow Jaow: up to and including 2.4.5; version 2.1 only; version 2.3 only; version 2.4 only

Published 2012-05-29. Last modified 2026-06-16.