CVE-2004-1448

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://echo.or.id/adv/adv03-y3dips-2004.txtExploit
http://secunia.com/advisories/12230/
http://www.kb.cert.org/vuls/id/417408Third Party Advisory, US Government Resource
http://www.securityfocus.com/archive/1/370852Exploit
http://www.securityfocus.com/bid/10859
https://exchange.xforce.ibmcloud.com/vulnerabilities/16900
http://echo.or.id/adv/adv03-y3dips-2004.txtExploit
http://secunia.com/advisories/12230/
http://www.kb.cert.org/vuls/id/417408Third Party Advisory, US Government Resource
http://www.securityfocus.com/archive/1/370852Exploit
http://www.securityfocus.com/bid/10859
https://exchange.xforce.ibmcloud.com/vulnerabilities/16900

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-14492.6Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's ha CVE-2004-14505.0Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locations.CVE-2004-14512.6Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick u CVE-2004-14527.2Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with roo CVE-2004-14532.1GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a s CVE-2004-14545.0Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First (OSPF) enabled, allows remote attackers to cause a denial of service (device CVE-2004-14555.1Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted p CVE-2004-14567.5filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.CVE-2004-14575.0The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.CVE-2004-14585.0The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a den CVE-2004-14595.0Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remo CVE-2004-14607.5Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and a