2 matches found
CVE-2006-3586
Jetbox CMS 2.1 SR1 is affected by CVE-2006-3586 due to unsanitized input leading to SQL injection in index.php (frontsession cookie and view parameter) and in admin/cms/index.php (login parameter). Exploitation could allow remote attackers to execute arbitrary SQL commands, potentially impacting ...
CVE-2006-3586
SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the 1 frontsession COOKIE parameter and 2 view parameter in index.php, and the 3 login parameter in admin/cms/index.php...