PT-2006-5229 · Jupiter · Jupiter Cms

Name of the Vulnerable Software and Affected Versions: Jupiter CMS version 1.1.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the template parameter in the index.php file. However, it's noted that the $template variable is defined as a static value...

CVE-2006-4428

CVE-2006-4428 affects Jupiter CMS 1.1.5 (index.php) where a URL in the template parameter could allow remote PHP code execution via a remote file inclusion path. The description notes a dispute: the $template variable is defined as a static value before it is referenced in an include statement, w...

CVE-2006-4428

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary PHP code via a URL in the template parameter. NOTE: CVE disputes this claim, since the $template variable is defined as a static value before it is referenced in an include...

Jupiter CMS 1.1.5 index.php Remote File Include

Jupiter CMS 1.1.5 index.php Remote File Include F0und by : D3nGeR E-mail : [email protected] the code $template = "default"; include "templates/$template/id.php"; $db-updateRow"config",array'value' = 'default',"variable = 'template'"; The Expl dork : powered by Jupiter CMS...

jupiterCMSinclude.txt

Jupiter CMS 1.1.5 index.php Remote File Include F0und by : D3nGeR E-mail : [email protected] the code $template = "default"; include "templates/$template/id.php"; $db-updateRow"config",array'value' = 'default',"variable = 'template'"; The Expl dork : powered by Jupiter CMS...

Jupiter CMS 1.1.5 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19721/info Jupiter CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the...

Jupiter CMS 1.1.5 - index.php Remote File Inclusion

Jupiter CMS 1.1.5 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19721/info Jupiter CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...

Directory traversal

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 null character in the n parameter...

CVE-2006-2105

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 null character in the n parameter...

CVE-2006-2105

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 null character in the n parameter...

CVE-2006-2105

CVE-2006-2105 affects Jupiter CMS versions 1.1.4 and 1.1.5. A directory traversal flaw in index.php allows remote attackers to read arbitrary files by supplying ".." sequences terminated by a null byte (%00) in the n parameter. The issue is a path traversal in user input handling that can access ...

Path traversal

Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...

Cross site scripting

Cross-site scripting XSS vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php...

CVE-2006-1679

Cross-site scripting XSS vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php...

CVE-2006-1680

Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...

CVE-2006-1679

Cross-site scripting XSS vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php...

CVE-2006-1680

Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...

CVE-2006-1680

CVE-2006-1680 affects Jupiter CMS 1.1.5. When display_errors is enabled, an attacker can trigger a direct request to modules/online.php and obtain the full server path, exposing a local file disclosure issue. The vulnerability is rooted in how errors are disclosed and can lead to information disc...

CVE-2006-1679

CVE-2006-1679 is an XSS flaw in Jupiter CMS 1.1.5. The vulnerability is in modules/online.php and is exploitable via the layout parameter to index.php, allowing remote attackers to inject arbitrary web script or HTML. No remediation or patch details are provided in the connected documents.

Multiple vulnerability in jupiter CMS

Author : KaDaL-X email : [email protected] site : http://kandangjamur.net/ Multiple vulnerability in jupiter CMS Vendor : http://www.highstrike.net/ version 1.1.5 Vulnerability code found in file modules/online.php PoC: XSS...