Sql injection

2007-02-1601:28:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.7%

JSON

Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and certain other HTTP headers, which set the ip variable that is used in SQL queries performed by index.php and certain other PHP scripts. NOTE: the attack vector might involve _SERVER.

CPENameOperatorVersion
jupiter_cmseq1.1.5

CPE	Name	Operator	Version
	jupiter_cms	eq	1.1.5

References

mgsdl.free.fr/advisories/12070214.txt

osvdb.org/33727

www.acid-root.new.fr/advisories/12070214.txt

www.securityfocus.com/archive/1/460076/100/0/threaded

www.securityfocus.com/archive/1/460100/100/0/threaded

www.securityfocus.com/bid/22560

www.exploit-db.com/exploits/3310