Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via .. sequences terminated by a %00 (null) character in the n parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jupiter_cms | Jupiter_cms | 1.1.4 (including) | 1.1.4 (including) |
| Jupiter_cms | Jupiter_cms | 1.1.5 (including) | 1.1.5 (including) |