Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: CMS / Portals :: b06-1499.htm

jupiter CMS multiple vulns



Multiple vulnerability in jupiter CMS
Multiple vulnerability in jupiter CMS



Author : KaDaL-X
email : king_purba@yahoo.co.uk 
site : http://kandangjamur.net/ 

Multiple vulnerability in jupiter CMS
Vendor : http://www.highstrike.net/ 
version 1.1.5

Vulnerability code found in file modules/online.php

PoC:

XSS
http://xxx/jupiter/jupiter/index.php?n=modules/online&&a=1&language=1&layout=%3Ch1%3E%3Cmarquee%3Ealooo 

FIX:
Create a validation function to fix the bugs, you can use htmlspecialchars() function to fix this security issue

Full Path disclosure
http://xxxx/jupiter/jupiter/modules/online.php 

FIX:
Turn off display error

Note :
Sorry, but vendor site is also vuln with this bugs


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH