PatchTheCVEjupiter cms vulnerabilities and fixes
Recent CVEs affecting jupiter cms, with upgrade or downgrade steps. 14 tracked.
Also searched as: jupitercms.
jupiter cms has 14 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-02-16. Highest priority: CVE-2006-4428 (score 67/100).
- CVE-2007-0987 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and exe
- CVE-2007-0986 MEDIUM 5.1 DOWNGRADE PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, al
- CVE-2007-0973 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers t
- CVE-2007-0972 HIGH 7.5 DOWNGRADE Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers t
- CVE-2007-0971 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL co
- CVE-2006-4876 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands
- CVE-2006-4875 MEDIUM 5.0 MITIGATE Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attac
- CVE-2006-4874 MEDIUM 4.3 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary
- CVE-2006-4873 MEDIUM 5.0 DOWNGRADE Jupiter CMS allows remote attackers to obtain sensitive information via a direct request for (1) includes/func
- CVE-2006-4428 CRITICAL 9.8 DOWNGRADE PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute a
- CVE-2006-2105 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read
- CVE-2006-1680 LOW 2.6 DOWNGRADE Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via
- CVE-2006-1679 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to
- CVE-2006-1223 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers
FAQ
How do I fix jupiter cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jupiter cms being exploited right now?
None of the tracked jupiter cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jupiter cms CVE should I patch first?
CVE-2006-4428 currently ranks highest (67/100): PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute a.