Description
SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter. NOTE: The view vector is already covered by CVE-2006-3586.2.
References
- jetboxcms-view-sql-injection(28841) vdb-entry
- 19303 vdb-entry
- 1562 third-party-advisory
- 20060909 Multible injections and vulnerabilities in Jetbox CMS mailing-list