Lucene search
HistoryFeb 13, 2005 - 5:00 a.m.
CVE-2004-1448
cve-2004-1448
jetbox one
remote code execution
images module
php files
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
88.9%
Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code.
Affected configurations
Node
jetboxjetbox_one_cmsMatch2.0.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetbox:jetbox_one_cms | jetbox jetbox one cms | eq | 2.0.8 |
Related
cvelist
cvelist
CVE-2004-1448
2005-02-13 05:00:00
CVE-2007-2733
2007-05-16 22:00:00
nvd
nvd
CVE-2004-1448
2004-12-31 05:00:00
CVE-2007-2733
2007-05-16 22:30:00
cve
cve
CVE-2007-2733
2007-05-16 22:30:00
prion
prion
Unrestricted file upload
2007-05-16 22:30:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
88.9%
Related for CVE-2004-1448