PT-2025-17262 · Unknown · Baseweb Jsite

Name of the Vulnerable Software and Affected Versions: baseweb JSite version 1.0 Description: A problematic issue was found in the software, affecting some unknown functionality of the file /a/sys/area/save. The manipulation of the Name argument leads to cross-site scripting. The attack may be...

PT-2025-17261 · Unknown · Baseweb Jsite

Name of the Vulnerable Software and Affected Versions: baseweb JSite version 1.0 Description: A vulnerability was found in the file /a/sys/user/save, where the manipulation of the Name argument leads to cross-site scripting. The attack can be launched remotely. Recommendations: For baseweb JSite...

JSite 安全漏洞

JSite is JSite open source a backend management system rapid development framework. A security vulnerability exists in JSite version 1.0, which stems from improper access control of the file /druid/index.html...

jsite 1.0 oe (sql/lfi) Multiple Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility +==-- --==+================================================================================+==--...

Sql injection

SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-7301

CVE-2008-7301 is a SQL injection vulnerability affecting jSite 1.0 OE in admin/login.php, exploitable via the username parameter to execute arbitrary SQL. The CVSSv2 base score is 7.5 (HIGH) with Network access and low attack complexity; impacts to confidentiality, integrity, and availability are...

CVE-2008-7301

SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-7301: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

PT-2011-1293

Name of the Vulnerable Software and Affected Versions jSite version 1.0 OE Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username parameter in the "admin/login.php" endpoint. Recommendations For jSite version 1.0 OE, consider...

CVE-2008-3193

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...

Sql injection

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...

Directory traversal

Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2008-3192

CVE-2008-3192 affects jSite 1.0 OE; a directory traversal flaw in index.php allows remote attackers to include and execute arbitrary local files via a .. in the module parameter. The issue enables local file inclusion (LFI) with potential code execution. The vulnerability is documented in multipl...

CVE-2008-3193

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...

CVE-2008-3193

CVE-2008-3193 describes a SQL injection vulnerability in jSite 1.0 OE . An attacker can trigger arbitrary SQL commands by manipulating the page parameter of the default URI, enabling remote execution without authentication (per CVSS 2.0: AV:N/AC:L/Au:N/C:P/I:P/A:P). The connected records corrobor...

CVE-2008-3192

Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2008-3193: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...

CVE-2008-3192: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...

jsite-sqllfi.txt

--==+================================================================================+==-- --==+ jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility +==-- --==+================================================================================+==-- -=-=--=-=-=-=-=-=-=-=-=-=-=-=-= SQL Injection Exploit...

jSite 1.0 OE (SQL/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== jSite 1.0 OE SQL/LFI Multiple Remote Vulnerabilities ======================================================...