Lucene search
HistorySep 13, 2006 - 10:07 p.m.
CVE-2006-4737
cve-2006-4737
nvd
sql injection
index.php
jetbox cms
7.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.7%
SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter. NOTE: The view vector is already covered by CVE-2006-3586.2.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetbox:jetbox_cms | jetbox jetbox cms | eq | 2.1_sr1 |
Related
cve
cve
CVE-2006-3586
2006-08-08 23:04:00
securityvulns
securityvulns
[Full-disclosure] Secunia Research: Jetbox Multiple Vulnerabilities
2006-08-02 00:00:00
7.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.7%
Related for CVE-2006-4737