CVE-2007-0986

Jupiter CMS 1.1.5 is affected by a PHP remote file inclusion in index.php when running PHP 5.0.0 or later. An attacker can supply an ftp URL in the n parameter to execute arbitrary PHP code on the affected system. The available documents confirm the vulnerability class and target version, but do ...