CVE-2008-6375

JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb...

CVE-2008-6376

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...

jbook-disclosesql.txt

--------------------------------------------------------- Portal Name: Jbook Download : http://www.planet-source-code.com/vb/scripts/ShowCode.asp?lngWId=4&txtCodeId=6258 Author : PouyaServer , [email protected] Vulnerability : SQL,DD ---------------------------------------------------------...

Jbook - SQL Injection

Jbook - SQL Injection source: https://www.securityfocus.com/bid/32599/info Jbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Jbook - SQL Injection

source: https://www.securityfocus.com/bid/32599/info Jbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1765

Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1765

Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1765

CVE-2006-1765 describes a cross-site scripting (XSS) vulnerability in the JBook 1.3 application, occurring in index.php via the page parameter. The consolidated sources state that remote attackers can inject arbitrary web script or HTML. The information provided includes CVSS 2.0 metrics (base sc...

Sql injection

Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 nom or 2 mail parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1743

Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 nom or 2 mail parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1743

CVE-2006-1743 affects JBook 1.4 and involves multiple SQL injection flaws in form.php that allow remote attackers to execute arbitrary SQL commands via the nom or mail parameters. The root cause is improper handling of user-supplied input in those parameters, enabling injected SQL execution. Publ...

CVE-2006-1743

Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 nom or 2 mail parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Jbook Cross Site Scripting

Title : Jbook Cross Site Scripting Author: Mourad aka Psych0 Moroccan Security Team Vendor: www.jmuller.net Version: 1.3 Jbook Guestbook is a PHP/MySQL based guestbook script. Vulnerability in index.php, this issue can allow an attacker to bypass content filters and potentially carry out xss...

JBook 1.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17419/info JBook is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

JBook 1.3 - index.php Cross-Site Scripting

JBook 1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17419/info JBook is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...