CVE-2006-4737: Jetbox CMS

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter. NOTE: The view vector is already covered by CVE-2006-3586.2.

Affected products

• Jetbox Jetbox CMS: version 2.1_sr1 only

Published 2006-09-13. Last modified 2026-06-16.