CVE-2008-6376

Nexusjnr Jbook - SQL Injection

Title source: rule

Description

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter).

Exploits (1)

exploitdb WORKING POC
webappsasp
https://www.exploit-db.com/exploits/32635

Scores

EPSS 0.0041
EPSS Percentile 61.6%

Details

CWE
CWE-89
Status published
Products (1)
nexusjnr/jbook
Published Mar 02, 2009
Tracked Since Feb 18, 2026