CVE-2006-1679

2006-04-1023:00:00

mitre

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.6%

JSON

Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php.

References

secunia.com/advisories/19582

www.securityfocus.com/archive/1/430391/100/0/threaded

www.securityfocus.com/bid/17405

www.vupen.com/english/advisories/2006/1302

exchange.xforce.ibmcloud.com/vulnerabilities/25700