Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2006-2105
Disclosure Date: April 29, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 (null) character in the n parameter.
0
Attacker Value
Unknown
CVE-2006-1679
Disclosure Date: April 11, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php.
0
Attacker Value
Unknown
CVE-2006-1680
Disclosure Date: April 11, 2006 (last updated October 04, 2023)
Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php.
0
Attacker Value
Unknown
CVE-2006-1223
Disclosure Date: March 14, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag.
0
