{"api_version":"1","generated_at":"2026-07-23T06:51:10+00:00","cve":"CVE-2007-6091","urls":{"html":"https://cve.report/CVE-2007-6091","api":"https://cve.report/api/cve/CVE-2007-6091.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-6091","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-6091"},"summary":{"title":"CVE-2007-6091","description":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-11-22 00:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/27713","name":"http://secunia.com/advisories/27713","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JiRo's Banner System \"Email\"/\"Password\" SQL Injection - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3384","name":"http://securityreason.com/securityalert/3384","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CXSecurity - IDS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/483859/100/0/threaded","name":"http://www.securityfocus.com/archive/1/483859/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/26479","name":"http://www.securityfocus.com/bid/26479","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"JiRo's Banner System Login.ASP Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/38740","name":"http://osvdb.org/38740","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://osvdb.org/38741","name":"http://osvdb.org/38741","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-6091","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6091","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"6091","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"jiro","cpe5":"banner_system","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:54:26.452Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"3384","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3384"},{"name":"26479","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/26479"},{"name":"20071117 JiRo´s Upload Manager SQL Injection","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/483859/100/0/threaded"},{"name":"38740","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/38740"},{"name":"38741","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/38741"},{"name":"27713","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27713"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-11-17T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"3384","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3384"},{"name":"26479","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/26479"},{"name":"20071117 JiRo´s Upload Manager SQL Injection","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/483859/100/0/threaded"},{"name":"38740","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/38740"},{"name":"38741","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/38741"},{"name":"27713","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27713"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-6091","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"3384","refsource":"SREASON","url":"http://securityreason.com/securityalert/3384"},{"name":"26479","refsource":"BID","url":"http://www.securityfocus.com/bid/26479"},{"name":"20071117 JiRo´s Upload Manager SQL Injection","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/483859/100/0/threaded"},{"name":"38740","refsource":"OSVDB","url":"http://osvdb.org/38740"},{"name":"38741","refsource":"OSVDB","url":"http://osvdb.org/38741"},{"name":"27713","refsource":"SECUNIA","url":"http://secunia.com/advisories/27713"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-6091","datePublished":"2007-11-22T00:00:00.000Z","dateReserved":"2007-11-21T00:00:00.000Z","dateUpdated":"2024-08-07T15:54:26.452Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-11-22 00:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jiro:banner_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6246FF49-7D35-4D9C-9D25-A720089F373E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"6091","Ordinal":"1","Title":"CVE-2007-6091","CVE":"CVE-2007-6091","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"6091","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.","Type":"Description","Title":"CVE-2007-6091"},{"CveYear":"2007","CveId":"6091","Ordinal":"2","NoteData":"2007-11-21","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"6091","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}