CVE-2008-6375

CVE-2008-6375 affects JBook, where sensitive data is stored under the web root with insufficient access control. The vulnerability allows remote attackers to directly download the database file (userids.mdb), exposing partial confidentiality as per the CVSS metrics (base score 5.0, MEDIUM). The s...

CVE-2008-6376

CVE-2008-6376 is a SQL injection vulnerability in Jbook’s main.asp that allows remote attackers to execute arbitrary SQL commands via the password (pass) parameter. The NVD entry reports a base score of 7.5 (HIGH) with NETWORK attack vector and low complexity, impact to confidentiality, integrity...

Jbook - SQL Injection

Jbook - SQL Injection source: https://www.securityfocus.com/bid/32599/info Jbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

jbook-disclosesql.txt

--------------------------------------------------------- Portal Name: Jbook Download : http://www.planet-source-code.com/vb/scripts/ShowCode.asp?lngWId=4&txtCodeId=6258 Author : PouyaServer , [email protected] Vulnerability : SQL,DD ---------------------------------------------------------...

Jbook - SQL Injection

source: https://www.securityfocus.com/bid/32599/info Jbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1765

Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1765

Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1765

CVE-2006-1765 describes a cross-site scripting (XSS) vulnerability in the JBook 1.3 application, occurring in index.php via the page parameter. The consolidated sources state that remote attackers can inject arbitrary web script or HTML. The information provided includes CVSS 2.0 metrics (base sc...

Sql injection

Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 nom or 2 mail parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1743

Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 nom or 2 mail parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1743

CVE-2006-1743 affects JBook 1.4 and involves multiple SQL injection flaws in form.php that allow remote attackers to execute arbitrary SQL commands via the nom or mail parameters. The root cause is improper handling of user-supplied input in those parameters, enabling injected SQL execution. Publ...

CVE-2006-1743

Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 nom or 2 mail parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Jbook Cross Site Scripting

Title : Jbook Cross Site Scripting Author: Mourad aka Psych0 Moroccan Security Team Vendor: www.jmuller.net Version: 1.3 Jbook Guestbook is a PHP/MySQL based guestbook script. Vulnerability in index.php, this issue can allow an attacker to bypass content filters and potentially carry out xss...

JBook 1.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17419/info JBook is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

JBook 1.3 - index.php Cross-Site Scripting

JBook 1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17419/info JBook is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...