CVE

Id
29448  
CVE No.
CVE-2007-6091  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in files/login.asp in JiRo"s Banner System (JBS) 2.0, and possibly JiRo"s Upload Manager (aka JiRo"s Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.  
Phase
Assigned (20071121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
309642 29448 CVE-2007-6091 BUGTRAQ:20071117 JiRo´s Upload Manager SQL Injection  View
309643 29448 CVE-2007-6091 URL:http://www.securityfocus.com/archive/1/archive/1/483859/100/0/threaded  View
309644 29448 CVE-2007-6091 BID:26479  View
309645 29448 CVE-2007-6091 URL:http://www.securityfocus.com/bid/26479  View
309646 29448 CVE-2007-6091 OSVDB:38740  View
309647 29448 CVE-2007-6091 URL:http://osvdb.org/38740  View
309648 29448 CVE-2007-6091 OSVDB:38741  View
309649 29448 CVE-2007-6091 URL:http://osvdb.org/38741  View
309650 29448 CVE-2007-6091 SECUNIA:27713  View
309651 29448 CVE-2007-6091 URL:http://secunia.com/advisories/27713  View
309652 29448 CVE-2007-6091 SREASON:3384  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55971 JVNDB-2007-004663 Ingate Firewall などの SRTP 実装におけるサービス運用妨害 (DoS) の脆弱性 Ingate Firewall および SIParator の SRTP 実装には、サービス運用妨害 (カーネルクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-6093 29448 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004663.html  View