CVE-2008-4651: Jetbox CMS

Medium severity, CVSS 6.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby parameter to admin/cms/images.php and the (2) nav_id parameter in an editrecord action to admin/cms/nav.php.

Affected products

• Jetbox Jetbox CMS: version 2.1 only

Published 2008-10-22. Last modified 2026-06-16.