OSVDB: The Open Source Vulnerability Database

Creditee: DarkFig

Known Contact Information:

(as of 2007-02-14)

Known Affiliations:

None at this time

Disclosed Vulnerabilities (5):

Disc. Date	OSVDB ID	CVEID	Title
2007-02-14	33727	2007-0971	Jupiter CMS Multiple HTTP Header SQL Injection
2007-02-14	33728	2007-0972	Jupiter CMS modules/emoticons.php Unrestricted File Upload
2007-02-14	33729	2007-0973	Jupiter CMS index.php Multiple HTTP Header XSS
2007-02-14	33730	2007-0986	Jupiter CMS index.php n Parameter FTP URL Remote File Inclusion
2007-02-14	33731	2007-0987	Jupiter CMS index.php n Parameter Traversal Local File Inclusion

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.