Vulnerabilities > Jupiter CMS > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-02-16 | CVE-2007-0987 | Scripts Multiple Input Validation vulnerability in Jupiter CMS Jupiter CMS 1.1.5 Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbitrary local files via a .. | 7.5 |
| 2007-02-16 | CVE-2007-0972 | Scripts Multiple Input Validation vulnerability in Jupiter CMS Jupiter CMS 1.1.5 Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit is_guest and is_user parameters. | 7.5 |
| 2007-02-16 | CVE-2007-0971 | Scripts Multiple Input Validation vulnerability in Jupiter CMS Jupiter CMS 1.1.5 Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and certain other HTTP headers, which set the ip variable that is used in SQL queries performed by index.php and certain other PHP scripts. | 7.5 |
| 2006-09-19 | CVE-2006-4876 | Input Validation vulnerability in Jupiter CMS Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) the user name during login, or the (2) key or (3) fpwusername parameters in modules/register. | 7.5 |