CVE-2006-4737

SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter. NOTE: The view vector is already covered by CVE-2006-3586.2...

CVE-2006-4737

Jetbox CMS contains an SQL injection in index.php via the item parameter, allowing remote injection of arbitrary web content. The description notes that the view-vector is already covered by CVE-2006-3586, indicating a related vulnerability in the same package. Root cause: unsanitized input used ...