CVE-2007-1898: Jetbox CMS

Medium severity, CVSS 5.8. EPSS: 2.5% chance of exploitation in the next 30 days.

formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTINGS[allowed_email_hosts][], and subject parameters.

Affected products

• Jetbox Jetbox CMS: version 2.1 only

Published 2007-05-16. Last modified 2026-06-16.