RSS   Podatności dla 'Jbook'   RSS

2009-03-02
 
CVE-2008-6391

 

 
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter).

 
 
CVE-2008-6376

 

 
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter).

 
 
CVE-2008-6375

 

 
JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb.

 


Copyright 2024, cxsecurity.com

 

Back to Top