high7.5
CVE-2006-4737
SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter.
Impact
SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter. NOTE: The view vector is already covered by CVE-2006-3586.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetbox | Jetbox Cms | Version 2.1_sr1 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1562
- http://www.securityfocus.com/archive/1/445652/100/0/threaded
- http://www.securityfocus.com/bid/19303
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28841
- http://securityreason.com/securityalert/1562
- http://www.securityfocus.com/archive/1/445652/100/0/threaded
- http://www.securityfocus.com/bid/19303
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28841