CVE-2008-4651 | BDVDB-2026-32992 Detail

Description#

Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby parameter to admin/cms/images.php and the (2) nav_id parameter in an editrecord action to admin/cms/nav.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/45986
http://www.digitrustgroup.com/advisories/web-application-security-jetbox
http://www.securityfocus.com/bid/31824

Exploit#

No public exploit known

History#

Version 12008-10-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.