GCVE - cpe:2.3:a:jupiter_cms:jupiter

Approved changes feed: RSS · Atom

cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.4:*:*:*:*:*:*:*

part: a version: 1.1.4 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:composer/socieboy/jupiter`	purl2cpe	2026-06-01 10:13:10.606960
`pkg:github/socieboy/jupiter`	purl2cpe	2026-06-01 10:13:10.606962

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2105`	vulnerable	2026-06-08 04:48:58.900750	Details available Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 (null) character in the n parameter. Published: 2006-04-29T10:00:00.000Z Updated: 2024-09-16T18:55:54.114Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/17716 http://downloads.securityfocus.com/vulnerabilities/exploits/jupitercms-lteq1.1.5-local-file-include.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1223`	vulnerable	2026-06-08 04:48:56.571192	Details available Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag. Published: 2006-03-14T11:00:00.000Z Updated: 2024-08-07T17:03:28.411Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/427406/100/0/threaded http://www.vupen.com/english/advisories/2006/0942 http://www.securityfocus.com/bid/17072 http://securityreason.com/securityalert/572 https://exchange.xforce.ibmcloud.com/vulnerabilities/25241	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.