Vulnerabilities

TI-2008-06083 CVE-2008-6391 · GHSA-hmjp-6rh9-p9wq

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute…

LOW 35

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00893 Published 2009-03-02 No fix listed CWE-89

TI-2008-06068 CVE-2008-6376 · GHSA-wr9w-758h-qjf4

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute…

LOW 35

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2009-03-02 No fix listed CWE-89

TI-2008-06067 CVE-2008-6375 · GHSA-vxx3-mp5x-ghj6

JBook stores sensitive information under the web root with insufficient access control…

LOW 25

JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01176 Published 2009-03-02 No fix listed CWE-264

Vulnerabilities

Filters

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute…

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute…

JBook stores sensitive information under the web root with insufficient access control…