NVD

Id
4465  
Name
CVE-2008-4651  
Description
Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby parameter to admin/cms/images.php and the (2) nav_id parameter in an editrecord action to admin/cms/nav.php.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-21  
Modified Date
2008-10-22  
Seq
2008-4651  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
28110 4465 CVE-2008-4651 http://www.digitrustgroup.com/advisories/web-application-security-jetbox  View
28111 4465 CVE-2008-4651 31824  View
28112 4465 CVE-2008-4651 jetboxcms-images-nav-sql-injection(45986)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49660 JVNDB-2008-004970 Jetbox CMS における SQL インジェクションの脆弱性 Jetbox CMS には、SQL インジェクションの脆弱性が存在します。 CVE-2008-4651 34764 CVE-2008-4651 4465 6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004970.html 2008-10-21 2012-09-25 View