Vendors / Jgbbs Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Jgbbs records in CISA KEV No Jgbbs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/bbs.mdb.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01612 · Published 2007-01-05 · No fix listed
Priority LOW 35
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the author parameter.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01094 · Published 2007-03-13 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High2 Medium0 Low0 No CVSS0