Filtered by vendor Nexusjnr
Subscriptions
Total
3 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2008-6391 | 1 Nexusjnr | 1 Jbook | 2024-11-21 | N/A |
| SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter). | ||||
| CVE-2008-6376 | 1 Nexusjnr | 1 Jbook | 2024-11-21 | N/A |
| SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter). | ||||
| CVE-2008-6375 | 1 Nexusjnr | 1 Jbook | 2024-11-21 | N/A |
| JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb. | ||||
Page 1 of 1.