{"id":"CVE-2007-6091","aliases":["EUVD-2007-6060","GHSA-mwvf-gp9c-72fv"],"status":"published","title":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and...","description":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02263,"percentile":0.83101,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2007-11-22T00:00:00Z","modified":"2026-06-16T22:47:23Z","exploits":[{"source":"exploitdb","id":"EDB-30775","title":"JiRo's Banner System 2.0 - 'login.asp' Multiple SQL Injections","type":"webapps","platform":"asp","date":"2007-11-17","verified":true,"url":"https://www.exploit-db.com/exploits/30775"}],"products":[{"vendor":"jiro","product":"banner_system"}],"references":[{"url":"http://securityreason.com/securityalert/3384","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/bid/26479","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/483859/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://osvdb.org/38740","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38741","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://secunia.com/advisories/27713","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6091"},{"url":"https://github.com/advisories/GHSA-mwvf-gp9c-72fv"}],"sources":{"cve":[{"id":"CVE-2007-6091","description":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.","status":"published","published":"2007-11-22T00:00:00Z","modified":"2024-08-07T15:54:26.452Z","updated_at":"2026-11-02T13:33:19.093583Z"}],"euvd":[{"id":"EUVD-2007-6060","description":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.","status":"published","published":"2007-11-22T00:00:00Z","modified":"2024-08-07T15:54:26Z","updated_at":"2026-11-03T01:16:14.290993Z"}],"ghsa":[{"id":"GHSA-mwvf-gp9c-72fv","title":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and...","description":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.","status":"published","published":"2022-05-01T18:39:33Z","modified":"2023-01-31T05:05:32Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:48:52.392041Z"}],"nvd":[{"id":"CVE-2007-6091","description":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.","status":"published","published":"2007-11-22T00:46:00Z","modified":"2026-06-16T22:47:23.247Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:01:23.208914Z"}]}}