← Back

Nexusjnr

nexusjnr

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Jbook
jbook
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-6391
1Nexusjnr
1Jbook
Apr 23, 2026
Mar 2, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter).
CVE-2008-6376
1Nexusjnr
1Jbook
Apr 23, 2026
Mar 2, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter).
CVE-2008-6375
1Nexusjnr
1Jbook
Apr 23, 2026
Mar 2, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb.