Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-0987. PoCs published by DarkFig.
AI-analyzed exploit summary This exploit demonstrates Local/Remote File Inclusion vulnerabilities in Jupiter CMS 1.1.5 due to improper filtering of the 'n' parameter in index.php. It allows attackers to include arbitrary local files (with magic_quotes_gpc=Off) or remote files (with PHP >= 5.0.0 and allow_url_fopen=On).
Description
Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot), or an absolute pathname, in the n parameter.
Exploits (1)
This exploit demonstrates Local/Remote File Inclusion vulnerabilities in Jupiter CMS 1.1.5 due to improper filtering of the 'n' parameter in index.php. It allows attackers to include arbitrary local files (with magic_quotes_gpc=Off) or remote files (with PHP >= 5.0.0 and allow_url_fopen=On).