Jupiter CMS 1.1.5 (Client-IP) Remote SQL Injection Exploit

No description provided by source. URL: http://www.acid-root.new.fr/advisories/12070214.txt / errorreportingEALL ^ ENOTICE; $url = 'http://localhost/jupiter/'; $xpl = new phpsploit; $xpl-agent"Mozilla"; $hev = "-1' UNION SELECT CONCAT'" ."BEGINXPLUSER'," ."SELECT username FROM users...

CVE-2007-0987: Undefined Security Weakness

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot, or an absolute pathname, in the n parameter...

CVE-2007-0986: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter...

CVE-2007-0971: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and certain other HTTP headers, which set the ip variable that is used in SQL queries performed by index.php and certain other PHP scripts. NOTE: the...

CVE-2007-0972: Undefined Security Weakness

Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit isguest and isuser parameters. NOTE: this issue might be related to CVE-2006-4875...

CVE-2007-0973: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header and certain other HTTP headers, which are displayed without proper sanitization when an administrator performs a Logged Gue...

Jupiter CMS 1.1.5 Remote File Upload Exploit

No description provided by source. URL: http://www.acid-root.new.fr/advisories/12070214.txt / errorreportingEALL ^ ENOTICE; $url = ' http://localhost/jupiter/'; $xpl = new phpsploit; $xpl-agent"Mozilla"; $arr = arrayfrmdturl = $url.'modules/emoticons.php', "a" = 1, "reqfile" =...

Jupiter CMS 1.1.5 (index.php) Local/Remote File Include Vulnerability

No description provided by source. Title: Jupiter CMS 1.1.5 Multiple Vulnerabilities Advisory ID: 12070214 Risk level: High Author: DarkFig [email protected] URL: http://www.acid-root.new.fr/advisories/12070214.txt Risk level: High Summary: Local/Remote File Inclusion Conditions: LFI:...

Jupiter CMS 1.1.5 (Client-IP) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Jupiter CMS 1.1.5 Client-IP Remote SQL Injection Exploit ========================================================== agent"Mozilla"; $hev = "-1' UNION SELECT CONCAT'"...

Jupiter CMS 1.1.5 (index.php) Local/Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Jupiter CMS 1.1.5 index.php Local/Remote File Include Vulnerability ===================================================================== Title: Jupiter CMS 1.1.5 Multip...

12070214.txt

Title: Jupiter CMS 1.1.5 Multiple Vulnerabilities Advisory ID: 12070214 Risk level: High Author: DarkFig URL: http://www.acid-root.new.fr/advisories/12070214.txt .: OVERVIEW Jupiter CMS 1.1.5 is a powerful user-friendly Community Management System. Advanced boxes/block system, members management,...

Jupiter CMS 1.1.5 - Arbitrary File Upload

Jupiter CMS 1.1.5 - Arbitrary File Upload URL: http://www.acid-root.new.fr/advisories/12070214.txt / errorreportingEALL ^ ENOTICE; $url = ' http://localhost/jupiter/'; $xpl = new phpsploit; $xpl-agent"Mozilla"; $arr = arrayfrmdturl = $url.'modules/emoticons.php', "a" = 1, "reqfile" =...

Jupiter CMS 1.1.5 - Client-IP SQL Injection

Jupiter CMS 1.1.5 - Client-IP SQL Injection URL: http://www.acid-root.new.fr/advisories/12070214.txt / errorreportingEALL ^ ENOTICE; $url = 'http://localhost/jupiter/'; $xpl = new phpsploit; $xpl-agent"Mozilla"; $hev = "-1' UNION SELECT CONCAT'" ."BEGINXPLUSER'," ."SELECT username FROM users LIMI...

Jupiter CMS 1.1.5 Multiple Vulnerabilities

Title: Jupiter CMS 1.1.5 Multiple Vulnerabilities Advisory ID: 12070214 Risk level: High Author: DarkFig [email protected] URL: http://www.acid-root.new.fr/advisories/12070214.txt .: OVERVIEW Jupiter CMS 1.1.5 is a powerful user-friendly Community Management System. Advanced boxes/block system,...

Jupiter CMS 1.1.5 Remote File Upload Exploit

Exploit for unknown platform in category web applications ============================================ Jupiter CMS 1.1.5 Remote File Upload Exploit ============================================ agent"Mozilla"; $arr = arrayfrmdturl = $url.'modules/emoticons.php', "a" = 1, "reqfile" =...

Jupiter CMS 1.1.5 - Arbitrary File Upload

URL: http://www.acid-root.new.fr/advisories/12070214.txt / errorreportingEALL ^ ENOTICE; $url = ' http://localhost/jupiter/'; $xpl = new phpsploit; $xpl-agent"Mozilla"; $arr = arrayfrmdturl = $url.'modules/emoticons.php', "a" = 1, "reqfile" = arrayfrmdtfilename = "iamaphpfile.php", frmdttype =...

Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion

Title: Jupiter CMS 1.1.5 Multiple Vulnerabilities Advisory ID: 12070214 Risk level: High Author: DarkFig URL: http://www.acid-root.new.fr/advisories/12070214.txt Risk level: High Summary: Local/Remote File Inclusion Conditions: LFI: magicquotesgpc = Off RFI: PHP = 5.0.0, allowurlfopen = On The...

Jupiter CMS 1.1.5 - index.php LocalRemote File Inclusion

Jupiter CMS 1.1.5 - index.php LocalRemote File Inclusion Title: Jupiter CMS 1.1.5 Multiple Vulnerabilities Advisory ID: 12070214 Risk level: High Author: DarkFig URL: http://www.acid-root.new.fr/advisories/12070214.txt Risk level: High Summary: Local/Remote File Inclusion Conditions: LFI:...

CVE-2006-4875

Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attackers to upload picture files, and possibly files with arbitrary extensions, to gallery/albums/public...

CVE-2006-4873

Jupiter CMS allows remote attackers to obtain sensitive information via a direct request for 1 includes/functions.php, 2 modules/register.php, 3 modules/poll.php, 4 modules/panel.php, 5 modules/pm.php, 6 modules/news.php, 7 modules/templateschange.php, 8 modules/users.php, 9 modules/misc.php, 10...