123 matches found
CVE-2007-2686
Cross-site scripting XSS vulnerability in index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in a sendpwd task...
CVE-2007-2686
CVE-2007-2686 describes a Cross‑Site Scripting (XSS) vulnerability in Jetbox CMS 2.1. The flaw is in index.php, where an attacker can inject arbitrary web script or HTML via the login parameter in the sendpwd task. Affected product: Jetbox CMS 2.1. Reported impact per sources is XSS with potentia...
CVE-2007-2686
Cross-site scripting XSS vulnerability in index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in a sendpwd task...
Jetbox CMS 2.1 - Login Variable Cross-Site Scripting
Jetbox CMS 2.1 - Login Variable Cross-Site Scripting source: https://www.securityfocus.com/bid/24095/info Jetbox CMS is prone to a cross-site scripting vulnerability. This vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the...
jetbox-sql.txt
netVigilance Security Advisory 28 Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from...
Jetbox CMS 2.1 - Login Variable Cross-Site Scripting
source: https://www.securityfocus.com/bid/24095/info Jetbox CMS is prone to a cross-site scripting vulnerability. This vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to...
Sql injection
Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 view or 2 login parameter...
Sql injection
Jetbox CMS 2.1 allows remote attackers to obtain sensitive information via 1 a direct request to a mainpage.php, b opentree.php, and c outputs.php; 2 a malformed view parameter to index.php, as demonstrated with an SQL injection manipulation; or 3 the id parameter to admin/cms/opentree.php, which...
CVE-2007-2684
Jetbox CMS 2.1 allows remote attackers to obtain sensitive information via 1 a direct request to a mainpage.php, b opentree.php, and c outputs.php; 2 a malformed view parameter to index.php, as demonstrated with an SQL injection manipulation; or 3 the id parameter to admin/cms/opentree.php, which...
CVE-2007-2685
Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 view or 2 login parameter...
CVE-2007-2685
Jetbox CMS 2.1 has SQL injection vulnerabilities in index.php via the view and login parameters, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper handling of input in Jetbox CMS 2.1 leads to injectable SQL. Exploitation is described as remote with no authenticatio...
CVE-2007-2685
Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 view or 2 login parameter...
CVE-2007-2684
Jetbox CMS 2.1 allows remote attackers to obtain sensitive information via 1 a direct request to a mainpage.php, b opentree.php, and c outputs.php; 2 a malformed view parameter to index.php, as demonstrated with an SQL injection manipulation; or 3 the id parameter to admin/cms/opentree.php, which...
CVE-2007-2684
Jetbox CMS 2.1 is affected by multiple information-disclosure vectors. The vulnerability arises from (1) direct requests to main_page.php, open_tree.php, and outputs.php, (2) a malformed view parameter to index.php enabling SQL-injection-like manipulation, and (3) the id[] parameter pass-through ...
[Full-disclosure] Jetbox CMS version 2.1 Multiple Path Disclosure Vulnerabilities
netVigilance Security Advisory 27 Jetbox CMS version 2.1 Multiple Path Disclosure Vulnerabilities Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from...
[Full-disclosure] Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities
netVigilance Security Advisory 28 Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from...
jetbox-inject.txt
netVigilance Security Advisory 26 Jetbox CMS version 2.1 E-Mail Injection Vulnerability Description: Jetbox content management system is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully...
jetboxcms-xss.txt
hi there jetbox cms is also vulnerable to severals xss GET: http://127.0.0.1/jetbox/index.php/view/search/?path=xss http://127.0.0.1/jetbox/index.php/view/supplynews/?companyname=xss http://127.0.0.1/jetbox/index.php/view/supplynews/?companyname=1&country=xss...
CVE-2007-2733
Unrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with author privileges to upload arbitrary scripts via unspecified vectors, which can be accessed in webfiles/. NOTE: this issue might be a duplicate of CVE-2004-1448...