PT-2006-5628 · Jupiter · Jupiter Cms

Hackers Pal · Published 2006-09-19 · Updated 2018-10-17 · CVE-2006-4874

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Jupiter CMS (affected versions not specified)

Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters in various PHP files, including modules/blocks.php, modules/register.php, modules/mass-email.php, and modules/search.php. The vulnerable parameters include language[Admin name], language[Admin back], language[Register title], language[Register title2], language[Mass-Email form title], language[Mass-Email form desc], language[Mass-Email form desc2], language[Mass-Email form desc3], language[Mass-Email form desc4], language[Forgotten title], language[Forgotten desc], language[Forgotten desc2], language[Forgotten desc3], language[Forgotten desc4], language[Forgotten desc5], language[Search view desc], language[Search view desc2], language[Search view desc3], language[Search view desc4], language[Search view desc5], language[Search view desc6], language[Search view desc7], and language[Search view desc8].

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-4874

Affected Products

Jupiter Cms

References · 8

• 🔥 https://exploit-db.com/exploits/28583 · Exploit
• 🔥 https://exploit-db.com/exploits/28582 · Exploit
• 🔥 https://exploit-db.com/exploits/28584 · Exploit
• 🔥 https://exploit-db.com/exploits/28585 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4874 · Security Note
• http://securityreason.com/securityalert/1608 · Note
• http://securityfocus.com/archive/1/446064/100/0/threaded · Note
• http://securityfocus.com/bid/20048 · Note