CVE-2007-6091

2007-11-2200:00:00

mitre

www.cve.org

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.2%

JSON

Multiple SQL injection vulnerabilities in files/login.asp in JiRo’s Banner System (JBS) 2.0, and possibly JiRo’s Upload Manager (aka JiRo’s Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.

References

osvdb.org/38740

osvdb.org/38741

secunia.com/advisories/27713

securityreason.com/securityalert/3384

www.securityfocus.com/archive/1/483859/100/0/threaded

www.securityfocus.com/bid/26479