CVE-2006-1680: Jupiter CMS

Low severity, CVSS 2.6. EPSS: 1.2% chance of exploitation in the next 30 days.

Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php.

Affected products

• Jupiter CMS Jupiter CMS: version 1.1.5 only

Published 2006-04-11. Last modified 2026-06-16.