Unrated severityNVD Advisory· Published Feb 16, 2007· Updated Apr 23, 2026

CVE-2007-0986

Description

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter.

Affected products

Jupiter Cms/Jupiter CMS
cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.5:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

mgsdl.free.fr/advisories/12070214.txtnvdExploitVendor Advisory
www.acid-root.new.fr/advisories/12070214.txtnvdExploitVendor Advisory
www.securityfocus.com/bid/22560nvdExploit
osvdb.org/33730nvd
www.securityfocus.com/archive/1/460076/100/0/threadednvd
www.securityfocus.com/archive/1/460100/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/32519nvd
www.exploit-db.com/exploits/3309nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.009
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000