CVE-2007-2685 Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) login parameter.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) login parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jetbox cms | = 2.1 | No fix listed |
References
- 20070521 Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities exploit mailing-list vendor-advisory
- www.netvigilance.com exploit vendor-advisory
- 34784 vdb-entry
- 20070521 Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities mailing-list
- 24077 vdb-entry
- jetbox-index-sql-injection(34387) vdb-entry