EUVD-2009-4187

Malware in sbrugna...

CVE-2009-4218

CVE-2009-4218 documents multiple SQL injection flaws in JiRo's Banner System eXperience (JBSX) files/login.asp, enabling remote attackers to inject commands via the admin or password field. This is related to CVE-2007-6091 and involves JiRo's Banner System (JBS) 2.0 (and potentially JiRo's Upload...

CVE-2007-6091

CVE-2007-6091 relates to multiple SQL injection vulnerabilities in JiRo’s Banner System (JBS) 2.0, and possibly JiRo’s Upload Manager (JUS). The flaws reside in the login routine (files/login.asp), where the attacker can inject via the (1) Username (Login/Email) or (2) Password fields to execute ...