CVE-2008-6391 - SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter)

HIGH

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter)

Published Mar 2, 2009

7.5

HIGH

CVSS 2.0

EPSS 0.89%

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter).

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6361		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47033		vdb-entryx_refsource_XF

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 2, 2009

Updated Aug 7, 2024

Reserved Mar 2, 2009

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Mar 2, 2009

Updated Aug 7, 2024

Exploited since n/a