CVE-2006-3586

CVE Database · CVE-2006-3586

CVE-2006-3586

· N/AModified

CVSS v3.1

N/A

EPSS

1.31%

Published

Aug 8, 2006

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) frontsession COOKIE parameter and (2) view parameter in index.php, and the (3) login parameter in admin/cms/index.php.

Affected Products (1)

jetbox · jetbox_cmsvulnerable

References (12)

http://secunia.com/advisories/20889

Vendor Advisory

http://secunia.com/secunia_research/2006-57/advisory/

Vendor Advisory

http://securityreason.com/securityalert/1339

http://www.securityfocus.com/archive/1/441980/100/0/threaded

http://www.securityfocus.com/bid/19303

https://exchange.xforce.ibmcloud.com/vulnerabilities/28168

http://secunia.com/advisories/20889

Vendor Advisory

http://secunia.com/secunia_research/2006-57/advisory/

Vendor Advisory

http://securityreason.com/securityalert/1339

KEV Catalog EPSS Scores Vendors All CVEs