CVE-2009-4218

CVE-2009-4218 documents multiple SQL injection flaws in JiRo's Banner System eXperience (JBSX) files/login.asp, enabling remote attackers to inject commands via the admin or password field. This is related to CVE-2007-6091 and involves JiRo's Banner System (JBS) 2.0 (and potentially JiRo's Upload...