CVE-2007-2733 Unrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with author privileges to upload arbitrary scripts via unspecified vectors, which can be accessed in webfiles/. N...
MediumCVSS 6.0
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with author privileges to upload arbitrary scripts via unspecified vectors, which can be accessed in webfiles/. NOTE: this issue might be a duplicate of CVE-2004-1448.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jetbox cms | = 2.1 | No fix listed |
References
- 37450 vdb-entry
- 2711 third-party-advisory
- 20070515 Re: Jetbox CMS version 2.1 E-Mail Injection Vulnerability mailing-list
- 23996 vdb-entry