Skip to content
Noroxi

jupiter cms records

14 published records for vendor jupiter cms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    14 records
    • CVE-2006-4428
      40Plan

      PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary PHP code via a URL in

      CriticalCVSS 9.8Proof of conceptEPSS 4%

      jupiter cms · jupiter cmsAug 28, 2006

    • CVE-2007-0972
      31Monitor

      Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by mo

      HighCVSS 7.5Proof of conceptEPSS 3%

      jupiter cms · jupiter cmsFeb 15, 2007

    • CVE-2007-0987
      31Monitor

      Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbitrary local files via

      HighCVSS 7.5Proof of conceptEPSS 3%

      jupiter cms · jupiter cmsFeb 16, 2007

    • CVE-2006-4876
      31Monitor

      Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) the user name during

      HighCVSS 7.5Proof of conceptEPSS 2%

      jupiter cms · jupiter cmsSep 19, 2006

    • CVE-2007-0971
      30Monitor

      Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP

      HighCVSS 7.5Proof of conceptEPSS 1%

      jupiter cms · jupiter cmsFeb 15, 2007

    • CVE-2007-0973
      27Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script

      MediumCVSS 6.8No exploitEPSS 1%

      jupiter cms · jupiter cmsFeb 15, 2007

    • CVE-2006-4875
      22Monitor

      Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attackers to upload picture files,

      MediumCVSS 5.0Proof of conceptEPSS 6%

      jupiter cms · jupiter cmsSep 19, 2006

    • CVE-2007-0986
      21Monitor

      PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execu

      MediumCVSS 5.1Proof of conceptEPSS 3%

      jupiter cms · jupiter cmsFeb 16, 2007

    • CVE-2006-4873
      21Monitor

      Jupiter CMS allows remote attackers to obtain sensitive information via a direct request for (1) includes/functions.php, (2) modules/registe

      MediumCVSS 5.0No exploitEPSS 2%

      jupiter cms · jupiter cmsSep 19, 2006

    • CVE-2006-2105
      20Monitor

      Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." seque

      MediumCVSS 5.0No exploitEPSS 1%

      jupiter cms · jupiter cmsApr 29, 2006

    • CVE-2006-1679
      18Monitor

      Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script o

      MediumCVSS 4.3Proof of conceptEPSS 4%

      jupiter cms · jupiter cmsApr 10, 2006

    • CVE-2006-4874
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script or HTML via the (1)

      MediumCVSS 4.3Proof of conceptEPSS 3%

      jupiter cms · jupiter cmsSep 19, 2006

    • CVE-2006-1223
      18Monitor

      Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script

      MediumCVSS 4.3Proof of conceptEPSS 2%

      jupiter cms · jupiter cmsMar 14, 2006

    • CVE-2006-1680
      10Monitor

      Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/on

      LowCVSS 2.6No exploitEPSS 1%

      jupiter cms · jupiter cmsApr 10, 2006