CVE

Id
19690  
CVE No.
CVE-2006-3586  
Status
Candidate  
Description
SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) frontsession COOKIE parameter and (2) view parameter in index.php, and the (3) login parameter in admin/cms/index.php.  
Phase
Assigned (20060713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
178201 19690 CVE-2006-3586 BUGTRAQ:20060802 Secunia Research: Jetbox Multiple Vulnerabilities  View
178202 19690 CVE-2006-3586 URL:http://www.securityfocus.com/archive/1/archive/1/441980/100/0/threaded  View
178203 19690 CVE-2006-3586 MISC:http://secunia.com/secunia_research/2006-57/advisory/  View
178204 19690 CVE-2006-3586 BID:19303  View
178205 19690 CVE-2006-3586 URL:http://www.securityfocus.com/bid/19303  View
178206 19690 CVE-2006-3586 SECUNIA:20889  View
178207 19690 CVE-2006-3586 URL:http://secunia.com/advisories/20889  View
178208 19690 CVE-2006-3586 SREASON:1339  View
178209 19690 CVE-2006-3586 URL:http://securityreason.com/securityalert/1339  View
178210 19690 CVE-2006-3586 XF:jetboxcms-index-sql-injection(28168)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58349 JVNDB-2006-000545 Macromedia Flash Player の 圧縮された不正な .swf ファイルの処理によるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2006-3588 19690 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000545.html  View