Lucene search
HistoryAug 08, 2006 - 11:04 p.m.
CVE-2006-3586
cve-2006-3586
sql injection
jetbox cms
security vulnerability
nvd
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.1%
SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) frontsession COOKIE parameter and (2) view parameter in index.php, and the (3) login parameter in admin/cms/index.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetbox:jetbox_cms | jetbox jetbox cms | eq | 2.1_sr1 |
Related
cve
cve
CVE-2006-4737
2006-09-13 22:07:00
securityvulns
securityvulns
[Full-disclosure] Secunia Research: Jetbox Multiple Vulnerabilities
2006-08-02 00:00:00
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.1%
Related for CVE-2006-3586