506 matches found
Jupiter CMS 1.1.5 - 'index.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19721/info Jupiter CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the...
CVE-2006-2105
Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 null character in the n parameter...
Directory traversal
Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 null character in the n parameter...
CVE-2006-2105
Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 null character in the n parameter...
CVE-2006-2105
CVE-2006-2105 affects Jupiter CMS versions 1.1.4 and 1.1.5. A directory traversal flaw in index.php allows remote attackers to read arbitrary files by supplying ".." sequences terminated by a null byte (%00) in the n parameter. The issue is a path traversal in user input handling that can access ...
CVE-2006-1680
Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...
CVE-2006-1679
Cross-site scripting XSS vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php...
Path traversal
Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...
CVE-2006-1679
Cross-site scripting XSS vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php...
CVE-2006-1680
Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...
CVE-2006-1680
CVE-2006-1680 affects Jupiter CMS 1.1.5. When display_errors is enabled, an attacker can trigger a direct request to modules/online.php and obtain the full server path, exposing a local file disclosure issue. The vulnerability is rooted in how errors are disclosed and can lead to information disc...
CVE-2006-1679
CVE-2006-1679 is an XSS flaw in Jupiter CMS 1.1.5. The vulnerability is in modules/online.php and is exploitable via the layout parameter to index.php, allowing remote attackers to inject arbitrary web script or HTML. No remediation or patch details are provided in the connected documents.
Multiple vulnerability in jupiter CMS
Author : KaDaL-X email : [email protected] site : http://kandangjamur.net/ Multiple vulnerability in jupiter CMS Vendor : http://www.highstrike.net/ version 1.1.5 Vulnerability code found in file modules/online.php PoC: XSS...
Jupiter CMS 1.1.5 - index.php Cross-Site Scripting
Jupiter CMS 1.1.5 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17405/info Jupiter CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...
Jupiter CMS 1.1.5 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17405/info Jupiter CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...
[SA19215] Jupiter Content Manager "image" BBcode Script Insertion
TITLE: Jupiter Content Manager "image" BBcode Script Insertion SECUNIA ADVISORY ID: SA19215 VERIFY ADVISORY: http://secunia.com/advisories/19215/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Jupiter Content Manager 1.x http://secunia.com/product/8685/...
Cross site scripting
Cross-site scripting XSS vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag...
CVE-2006-1223
CVE-2006-1223 affects Jupiter Content Manager 1.1.5 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that lets remote attackers inject arbitrary script or HTML via a Javascript URI in the image BBcode tag. Impact is client-side script execution; no further exploit details or pa...