CVE:CVE-2008-4651
CNNVD:CNNVD-200810-352
Jetbox CMS存在多个SQL注入漏洞，远程认证用户可以借助admin/cms/images.php的orderby参数和admin/cms/nav.php的editrecord操作中的nav_id参数，来执行任意的SQL指令。
solution:Upgrade jetbox jetbox_cms to a higher version than 2.1,and avoid the version 2.1