Description
Unrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with author privileges to upload arbitrary scripts via unspecified vectors, which can be accessed in webfiles/. NOTE: this issue might be a duplicate of CVE-2004-1448.
References
- 20070515 Re: Jetbox CMS version 2.1 E-Mail Injection Vulnerability mailing-list
- 23996 vdb-entry
- 2711 third-party-advisory
- 37450 vdb-entry