CVE-2008-6376

CVE-2008-6376

EPSS 1.0%

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter).

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://packetstormsecurity.org/0812-exploits/jbook-disclosesql.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/47033 http://www.securityfocus.com/bid/32599