Unrated severityNVD Advisory· Published Mar 2, 2009· Updated Jun 16, 2026

CVE-2008-6375

Description

JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb.

Affected products

Jbook/Jbook2 versions
cpe:2.3:a:nexusjnr:jbook:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nexusjnr:jbook:-:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

packetstormsecurity.org/0812-exploits/jbook-disclosesql.txtnvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/47034nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000