3 matches found
Path traversal
Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...
2.6CVSS7.1AI score0.01215EPSS
SaveExploits0References4Affected Software1
CVE-2006-1680: Undefined Security Weakness
Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...
2.6CVSS5.9AI score0.01215EPSS
SaveExploits0References1
CVE-2006-1679: Undefined Security Weakness
Cross-site scripting XSS vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php...
4.3CVSS6AI score0.04157EPSS
SaveExploits2References1
20