CVE-2004-1447 Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information.
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jetbox one cms | = 2.0.8 | No fix listed |
References
- echo.or.id
- 12230 third-party-advisory
- VU#586720 third-party-advisory us-government-resource
- 8325 vdb-entry
- 20040804 vulnerabilities in JetboxOne CMS mailing-list
- 10858 vdb-entry
- jetbox-one-plaintext-password(16898) vdb-entry