Jetbox / Jetbox Cms
19 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2008-6174 | Cross-site scripting (XSS) vulnerability in admin/postlister/index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the… | MEDIUM | 4.3 | Feb 19, 2009 |
| CVE-2008-4651 | Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby parameter to ad… | MEDIUM | 6.0 | Oct 21, 2008 |
| CVE-2007-2686 | Cross-site scripting (XSS) vulnerability in index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter… | MEDIUM | 4.3 | May 22, 2007 |
| CVE-2007-2685 | Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) login pa… | HIGH | 7.5 | May 21, 2007 |
| CVE-2007-2684 | Jetbox CMS 2.1 allows remote attackers to obtain sensitive information via (1) a direct request to (a) main_page.php, (b) open_tree.php, and (c) outputs.php; (… | MEDIUM | 5.0 | May 21, 2007 |
| CVE-2007-2733 | Unrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with author privileges to upload arbitrary scripts via unspecified vecto… | MEDIUM | 6.0 | May 16, 2007 |
| CVE-2007-2732 | Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML via the (1) path parameter to v… | MEDIUM | 6.8 | May 16, 2007 |
| CVE-2007-2731 | CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF (%0A) sequences in the su… | MEDIUM | 4.0 | May 16, 2007 |
| CVE-2007-1898 | formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTINGS[allowed_email_hosts][], and subject p… | MEDIUM | 5.8 | May 16, 2007 |
| CVE-2006-4740 | Jetbox CMS allows remote attackers to obtain sensitive information via a direct request for certain files, which reveal the path in an error message. | MEDIUM | 5.0 | Sep 13, 2006 |
| CVE-2006-4739 | Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the Origin… | LOW | 2.6 | Sep 13, 2006 |
| CVE-2006-4738 | PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includes_path para… | HIGH | 7.5 | Sep 13, 2006 |
| CVE-2006-4737 | SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter. NOTE: The view ve… | HIGH | 7.5 | Sep 13, 2006 |
| CVE-2006-4422 | PHP remote file inclusion vulnerability in includes/phpdig/libs/search_function.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary PHP code via… | HIGH | 7.5 | Aug 29, 2006 |
| CVE-2006-3586 | SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) frontsession COOKIE parameter and (2) v… | HIGH | 7.5 | Aug 8, 2006 |
| CVE-2006-3585 | Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the (1) login param… | MEDIUM | 4.3 | Aug 8, 2006 |
| CVE-2006-3584 | Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, w… | HIGH | 7.5 | Aug 8, 2006 |
| CVE-2006-3583 | Session fixation vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to hijack web sessions via a crafted link and the administrator section. | HIGH | 7.5 | Aug 8, 2006 |
| CVE-2006-2270 | PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL in the relative_sc… | HIGH | 7.5 | May 9, 2006 |
Showing 1 to 19 of 19 CVEs