Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2007-2733

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Jetbox CMS中存在未限制文件上传漏洞。拥有作者特权的远程认证用户可以借助未明向量，上传任意脚本。这些未明向量可在webfiles/中被访问。

AI Predicted 6.5 Difficulty: Easy EPSS 0.95% · P60
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2007-2733

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with author privileges to upload arbitrary scripts via unspecified vectors, which can be accessed in webfiles/. NOTE: this issue might be a duplicate of CVE-2004-1448.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Jetbox CMS 'webfiles/'任意文件上传漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Jetbox CMS中存在未限制文件上传漏洞。拥有作者特权的远程认证用户可以借助未明向量，上传任意脚本。这些未明向量可在webfiles/中被访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2007-2733

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-2733

请登录查看更多情报信息。

Vendor Advisories for CVE-2007-2733 (3)

Same Patch Batch · n/a · 2007-05-16 · 55 CVEs total

CVE-2007-2689 Check Point Web Intelligence GS07-01 全宽度和半宽度编码IDS/IPS/WAF绕过漏洞
CVE-2007-2704 BEA WebLogic Server 拒绝服务攻击漏洞
CVE-2007-2699 BEA WebLogic Express和WebLogic Server 域安全策略安全权限漏洞
CVE-2007-2702 BEA WebLogic Portal GroupSpace应用程序跨站脚本攻击漏洞
CVE-2007-2701 BEA WebLogic Server JMS Message Bridge 安全访问漏洞
CVE-2007-2700 BEA WebLogic Express和WebLogic Server WLST脚本信息泄露漏洞
CVE-2007-2703 BEA WebLogic Portal 安全漏洞
CVE-2007-2692 MySQL SQL SECURITY INVOKER存储过程权限提升漏洞
CVE-2007-2691 MySQL Rename Table函数访问验证漏洞
CVE-2007-2690 IBM ISS Proventia系列产品 全宽度和半宽度编码IDS/IPS/WAF绕过漏洞
CVE-2007-2693 MySQL Alter Table函数信息泄露漏洞
CVE-2007-2688 Caucho Resin多个远程信息泄露漏洞
CVE-2007-2715 Snaps! Gallery 'Users.PHP' 远程密码更改漏洞
CVE-2007-2714 WordPress Akismet Plugin 'akismet.php' 未明漏洞
CVE-2007-2713 IFDate Administrative 'admin/URI' 身份认证绕过漏洞
CVE-2007-2712 MHSoftware Connect Daily 未明漏洞
CVE-2007-2711 TinyIdentD远程栈缓冲区溢出漏洞
CVE-2007-2710 NagiosQL 'prepend_adm.php' PHP远程文件包含漏洞
CVE-2007-2709 NagiosQL 'prepend_adm.php' PHP远程文件包含漏洞
CVE-2007-2708 Tools 4 Web News-Script 'NewsAdmin.PHP' 远程文件包含漏洞

Showing top 20 of 55 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2007-2733

No comments yet

Leave a comment