Lucene search

K
cveMitreCVE-2004-1448
HistoryFeb 13, 2005 - 5:00 a.m.

CVE-2004-1448

2005-02-1305:00:00
mitre
web.nvd.nist.gov
29
cve-2004-1448
jetbox one
remote code execution
images module
php files
nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.02

Percentile

88.9%

Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code.

Affected configurations

Nvd
Node
jetboxjetbox_one_cmsMatch2.0.8
VendorProductVersionCPE
jetboxjetbox_one_cms2.0.8cpe:2.3:a:jetbox:jetbox_one_cms:2.0.8:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.02

Percentile

88.9%

Related for CVE-2004-1448