CVE-2006-2105: Jupiter CMS

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 (null) character in the n parameter.

Affected products

• Jupiter CMS Jupiter CMS: version 1.1.4 only; version 1.1.5 only

Published 2006-04-29. Last modified 2026-06-16.