Description
Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code.
References
- 12230 third-party-advisory
- 10859 vdb-entry
- http://echo.or.id/adv/adv03-y3dips-2004.txt
- jetbox-one-file-upload(16900) vdb-entry
- VU#417408 third-party-advisory
- 20040804 vulnerabilities in JetboxOne CMS mailing-list