VendorsNexusjnrjbookany version
Vulnerabilities

Nexusjnr Jbook any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2008-6376
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter).
Published 2009-03-02 · Modified
7.51 PoCEPSS 0.010
CVE-2008-6391
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter).
Published 2009-03-02 · Modified
7.51 PoCEPSS 0.009
CVE-2008-6375
JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb.
Published 2009-03-02 · Modified
5.0EPSS 0.012