CVE:CVE-2007-6091
CNNVD:CNNVD-200711-318
JiRo's Banner System (JBS) 2.0,以及可能的JiRo's Upload Manager (又称JiRo's Upload System or JUS)中的files/login.asp存在多个SQL注入漏洞,远程攻击者借助(1)Username(又称Login或 Email)或(2) Password 字段执行任意SQL指令。
solution:Upgrade jiro banner_system to a higher version than 2.0,and avoid the version 2.0