CVE-2006-3586

Published: Aug 8, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) frontsession COOKIE parameter and (2) view parameter in index.php, and the (3) login parameter in admin/cms/index.php.

Affected (1)

Products: Jetbox: Jetbox Cms

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jetbox Jetbox Cms	Version 2.1_sr1

References (12)

http://secunia.com/advisories/20889

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2006-57/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://securityreason.com/securityalert/1339

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/441980/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/19303

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/28168

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/20889

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/secunia_research/2006-57/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/1339

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/441980/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19303

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28168

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.