CVE-2007-2685

Published: May 21, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) login parameter.

Affected (1)

Products: Jetbox: Jetbox Cms

Jetbox

1 product

Jetbox Cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jetbox Jetbox Cms	Version 2.1

References (12)

http://marc.info/?l=full-disclosure&m=117974433216496&w=2

Source: cve@mitre.org

ExploitVendor Advisory

http://www.netvigilance.com/advisory0028

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/34784

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/469223/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24077

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34387

Source: cve@mitre.org

http://marc.info/?l=full-disclosure&m=117974433216496&w=2