Sql injection

Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 nom or 2 mail parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1743

Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 nom or 2 mail parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1743

CVE-2006-1743 affects JBook 1.4 and involves multiple SQL injection flaws in form.php that allow remote attackers to execute arbitrary SQL commands via the nom or mail parameters. The root cause is improper handling of user-supplied input in those parameters, enabling injected SQL execution. Publ...