CVE-2009-4218: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System eXperience JBSX allow remote attackers to execute arbitrary SQL commands via the 1 admin or 2 password field, a related issue to CVE-2007-6091. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-6091: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System JBS 2.0, and possibly JiRo's Upload Manager aka JiRo's Upload System or JUS, allow remote attackers to execute arbitrary SQL commands via the 1 Username aka Login or Email or 2 Password field...