jupiter CMS 1.1.5 is vulnerable to XSS and full path disclosure in online.php.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45374/jupiter-1.1.5.txt
Source: https://packetstormsecurity.com/files/45374/jupiter-1.1.5.txt.html