CVE-2007-6091 | BDVDB-2026-27935 Detail

Description#

Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/3384
http://www.securityfocus.com/bid/26479
http://www.securityfocus.com/archive/1/483859/100/0/threaded
http://osvdb.org/38740
http://osvdb.org/38741
http://secunia.com/advisories/27713

Exploit#

No public exploit known

History#

Version 12007-11-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.