CVE-2007-0986

Published: Feb 16, 2007Modified: Apr 23, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter.

Affected (1)

Products: Jupiter Cms: Jupiter Cms

Jupiter Cms

1 product

Jupiter Cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jupiter Cms Jupiter Cms	Version 1.1.5

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (16)

http://mgsdl.free.fr/advisories/12070214.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://osvdb.org/33730

Source: cve@mitre.org

http://www.acid-root.new.fr/advisories/12070214.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/460076/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/460100/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22560

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/32519

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3309

Source: cve@mitre.org

http://mgsdl.free.fr/advisories/12070214.txt