GCVE - cpe:2.3:a:jupiter_cms:jupiter

Approved changes feed: RSS · Atom

cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.5:*:*:*:*:*:*:*

part: a version: 1.1.5 update: *

Vendor	Jupiter Cms (`c5302d5f-b818-5b8c-a62b-a8917727ecc5`)
Product	Jupiter Cms (`aff0222c-2eb7-5cd2-b4d0-91933c81a1a3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:composer/socieboy/jupiter`	purl2cpe	2026-06-01 10:13:10.608318
`pkg:github/socieboy/jupiter`	purl2cpe	2026-06-01 10:13:10.608320

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-0987`	vulnerable	2026-06-08 04:49:33.946405	Details available Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot), or an absolute pathname, in the n parameter. Published: 2007-02-16T11:00:00.000Z Updated: 2024-08-07T12:43:21.548Z Open on db.gcve.eu Reference links http://osvdb.org/33731 http://mgsdl.free.fr/advisories/12070214.txt http://www.securityfocus.com/bid/22560 http://www.securityfocus.com/archive/1/460076/100/0/threaded http://www.securityfocus.com/archive/1/460100/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0986`	vulnerable	2026-06-08 04:49:33.946046	Details available PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter. Published: 2007-02-16T11:00:00.000Z Updated: 2024-08-07T12:43:21.823Z Open on db.gcve.eu Reference links http://mgsdl.free.fr/advisories/12070214.txt http://www.securityfocus.com/bid/22560 https://exchange.xforce.ibmcloud.com/vulnerabilities/32519 http://www.securityfocus.com/archive/1/460076/100/0/threaded http://www.securityfocus.com/archive/1/460100/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0973`	vulnerable	2026-06-08 04:49:33.917945	Details available Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header and certain other HTTP headers, which are displayed without proper sanitization when an administrator performs a Logged Guest action. Published: 2007-02-16T01:00:00.000Z Updated: 2024-08-07T12:34:21.456Z Open on db.gcve.eu Reference links http://mgsdl.free.fr/advisories/12070214.txt http://www.securityfocus.com/bid/22560 https://exchange.xforce.ibmcloud.com/vulnerabilities/32518 http://www.securityfocus.com/archive/1/460076/100/0/threaded http://www.securityfocus.com/archive/1/460100/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0972`	vulnerable	2026-06-08 04:49:33.917597	Details available Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit is_guest and is_user parameters. NOTE: this issue might be related to CVE-2006-4875. Published: 2007-02-16T01:00:00.000Z Updated: 2024-08-07T12:34:21.322Z Open on db.gcve.eu Reference links http://mgsdl.free.fr/advisories/12070214.txt http://www.securityfocus.com/bid/22560 https://www.exploit-db.com/exploits/3311 http://www.securityfocus.com/archive/1/460076/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/32517	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0971`	vulnerable	2026-06-08 04:49:33.917166	Details available Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and certain other HTTP headers, which set the ip variable that is used in SQL queries performed by index.php and certain other PHP scripts. NOTE: the attack vector might involve _SERVER. Published: 2007-02-16T01:00:00.000Z Updated: 2024-08-07T12:34:21.378Z Open on db.gcve.eu Reference links http://mgsdl.free.fr/advisories/12070214.txt http://osvdb.org/33727 https://www.exploit-db.com/exploits/3310 http://www.securityfocus.com/bid/22560 http://www.securityfocus.com/archive/1/460076/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4873`	vulnerable	2026-06-08 04:49:19.136165	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4428`	vulnerable	2026-06-08 04:49:17.847312	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2105`	vulnerable	2026-06-08 04:48:58.900774	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1680`	vulnerable	2026-06-08 04:48:57.808719	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1679`	vulnerable	2026-06-08 04:48:57.808366	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Jupiter Cms

Notes

PURL mappings

Vulnerability references

Contribute