CVEvulnerability

CVE-2006-3586

7.5 HIGH Published 2006-08-08 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2006-08-08
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) frontsession COOKIE parameter and (2) view parameter in index.php, and the (3) login parameter in admin/cms/index.php.

Affected configurations

• jetbox jetbox cms 2.1 sr1

References

http://secunia.com/advisories/20889 Vendor Advisory
http://secunia.com/secunia_research/2006-57/advisory/ Vendor Advisory
http://securityreason.com/securityalert/1339 securityreason.com
http://www.securityfocus.com/archive/1/441980/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/19303 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/28168 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/20889 Vendor Advisory
http://secunia.com/secunia_research/2006-57/advisory/ Vendor Advisory
http://securityreason.com/securityalert/1339 securityreason.com
http://www.securityfocus.com/archive/1/441980/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/19303 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/28168 exchange.xforce.ibmcloud.com