What’s Vulnerable › Vulnerabilities

CVE-2004-1448

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-12-31 · updated 2026-06-16

Description

Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code.

Affected products

• Jetbox One Cms: 2.0.8

References

• http://echo.or.id/adv/adv03-y3dips-2004.txt
• http://secunia.com/advisories/12230/
• http://www.kb.cert.org/vuls/id/417408
• http://www.securityfocus.com/archive/1/370852
• http://www.securityfocus.com/bid/10859
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16900
• http://echo.or.id/adv/adv03-y3dips-2004.txt
• http://secunia.com/advisories/12230/
• http://www.kb.cert.org/vuls/id/417408
• http://www.securityfocus.com/archive/1/370852
• http://www.securityfocus.com/bid/10859
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16900

Get alerted when CVE-2004-1448 or the next vulnerability affects your stack