CVE-2007-2684

Jetbox CMS 2.1 allows remote attackers to obtain sensitive information via (1) a direct request to (a) main_page.php, (b) open_tree.php, and (c) outputs.php; (2) a malformed view parameter to index.php, as demonstrated with an SQL injection manipulation; or (3) the id[] parameter to admin/cms/opentree.php, which reveals the installation path in the resulting error message.

• http://marc.info/?l=full-disclosure&m=117974375029054&w=2Exploit, Vendor Advisory
• http://osvdb.org/34787
• http://osvdb.org/34788
• http://osvdb.org/34789
• http://osvdb.org/34790
• http://www.netvigilance.com/advisory0027Exploit, Vendor Advisory
• http://www.osvdb.org/34783
• http://www.securityfocus.com/archive/1/469222/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34385
• http://marc.info/?l=full-disclosure&m=117974375029054&w=2Exploit, Vendor Advisory
• http://osvdb.org/34787
• http://osvdb.org/34788
• http://osvdb.org/34789
• http://osvdb.org/34790
• http://www.netvigilance.com/advisory0027Exploit, Vendor Advisory
• http://www.osvdb.org/34783
• http://www.securityfocus.com/archive/1/469222/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34385

Published

May 21, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2678Buffer overflow in the isChecked function in toolbar.dll in …
• CVE-2007-2679PHP file inclusion vulnerability in index.php in Ivan Peevsk…
• CVE-2007-2680Cross-site scripting (XSS) vulnerability in the management i…
• CVE-2007-2681Directory traversal vulnerability in blogs/index.php in b2ev…
• CVE-2007-2682The installer for Adobe Version Cue CS3 Server on Apple Mac …
• CVE-2007-2683Buffer overflow in Mutt 1.4.2 might allow local users to exe…
• CVE-2007-2685Multiple SQL injection vulnerabilities in index.php in Jetbo…
• CVE-2007-2686Cross-site scripting (XSS) vulnerability in index.php in Jet…
• CVE-2007-2687Stack-based buffer overflow in the MicroWorld Agent service …
• CVE-2007-2688The Cisco Intrusion Prevention System (IPS) and IOS with Fir…
• CVE-2007-2689Check Point Web Intelligence does not properly handle certai…
• CVE-2007-2690Multiple IBM ISS Proventia Series products, including the A,…