CVE-2013-3081

CVE-2013-3081 describes a SQL injection vulnerability in the checkEmailFormat function within the Jojo CMS, specifically affecting versions prior to 1.2.2. This flaw allows remote attackers to execute arbitrary SQL commands by manipulating the X-Forwarded-For HTTP header sent to the /articles/test/ endpoint. The vulnerability carries a CVSS score of 7.5, indicating high severity with network-based attacks, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, an ExploitDB entry (EDB-38519) confirms the existence of public exploit code, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.