{"api_version":"1","generated_at":"2026-07-23T10:50:13+00:00","cve":"CVE-2007-0986","urls":{"html":"https://cve.report/CVE-2007-0986","api":"https://cve.report/api/cve/CVE-2007-0986.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-0986","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-0986"},"summary":{"title":"CVE-2007-0986","description":"PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-02-16 11:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-94","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.1","severity":"","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/460076/100/0/threaded","name":"http://www.securityfocus.com/archive/1/460076/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://osvdb.org/33730","name":"http://osvdb.org/33730","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.exploit-db.com/exploits/3309","name":"https://www.exploit-db.com/exploits/3309","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion - PHP webapps Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/460100/100/0/threaded","name":"http://www.securityfocus.com/archive/1/460100/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32519","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32519","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/22560","name":"http://www.securityfocus.com/bid/22560","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Jupiter CMS Multiple Scripts Multiple Input Validation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.acid-root.new.fr/advisories/12070214.txt","name":"http://www.acid-root.new.fr/advisories/12070214.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"new.fr is available for purchase - Sedo.com","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://mgsdl.free.fr/advisories/12070214.txt","name":"http://mgsdl.free.fr/advisories/12070214.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"new.fr is available for purchase - Sedo.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0986","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0986","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"jupiter_cms","cpe5":"jupiter_cms","cpe6":"1.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:43:21.823Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://mgsdl.free.fr/advisories/12070214.txt"},{"name":"22560","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22560"},{"name":"jupitercm-index-n-file-include(32519)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32519"},{"name":"20070214 Jupiter CMS 1.1.5 Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/460076/100/0/threaded"},{"name":"20070214 Re: Jupiter CMS 1.1.5 Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/460100/100/0/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.acid-root.new.fr/advisories/12070214.txt"},{"name":"33730","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33730"},{"name":"3309","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/3309"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-02-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://mgsdl.free.fr/advisories/12070214.txt"},{"name":"22560","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22560"},{"name":"jupitercm-index-n-file-include(32519)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32519"},{"name":"20070214 Jupiter CMS 1.1.5 Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/460076/100/0/threaded"},{"name":"20070214 Re: Jupiter CMS 1.1.5 Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/460100/100/0/threaded"},{"tags":["x_refsource_MISC"],"url":"http://www.acid-root.new.fr/advisories/12070214.txt"},{"name":"33730","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33730"},{"name":"3309","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/3309"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-0986","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://mgsdl.free.fr/advisories/12070214.txt","refsource":"MISC","url":"http://mgsdl.free.fr/advisories/12070214.txt"},{"name":"22560","refsource":"BID","url":"http://www.securityfocus.com/bid/22560"},{"name":"jupitercm-index-n-file-include(32519)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32519"},{"name":"20070214 Jupiter CMS 1.1.5 Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/460076/100/0/threaded"},{"name":"20070214 Re: Jupiter CMS 1.1.5 Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/460100/100/0/threaded"},{"name":"http://www.acid-root.new.fr/advisories/12070214.txt","refsource":"MISC","url":"http://www.acid-root.new.fr/advisories/12070214.txt"},{"name":"33730","refsource":"OSVDB","url":"http://osvdb.org/33730"},{"name":"3309","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/3309"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-0986","datePublished":"2007-02-16T11:00:00.000Z","dateReserved":"2007-02-16T00:00:00.000Z","dateUpdated":"2024-08-07T12:43:21.823Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-02-16 11:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-94","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"EB372559-61D8-4E8D-9ED2-DB7F211E8C78"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"986","Ordinal":"1","Title":"CVE-2007-0986","CVE":"CVE-2007-0986","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"986","Ordinal":"1","NoteData":"PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter.","Type":"Description","Title":"CVE-2007-0986"},{"CveYear":"2007","CveId":"986","Ordinal":"2","NoteData":"2007-02-16","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"986","Ordinal":"3","NoteData":"2018-10-16","Type":"Other","Title":"Modified"}]}}}