CVE-2008-6391

HIGH CVSS: 7.5 Published: 2009-03-02 Modified: 2026-06-16

Description

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter).

Affected Platforms

Nexusjnr Jbook

Weakness Type

CWE-89

References