CVEvulnerability
CVE-2009-1318
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.
Affected configurations
• jamroom jamroom
• jamroom jamroom 1.0
• jamroom jamroom 2.0.9
• jamroom jamroom 2.6.10
• jamroom jamroom 2.6.11
• jamroom jamroom 2.6.12
• jamroom jamroom 2.60
• jamroom jamroom 2.61
• jamroom jamroom 2.62
• jamroom jamroom 2.63
• jamroom jamroom 2.64
• jamroom jamroom 2.65
• jamroom jamroom 2.66
• jamroom jamroom 2.67
• jamroom jamroom 2.68
• jamroom jamroom 2.69
• jamroom jamroom 3.0
• jamroom jamroom 3.0.1
• jamroom jamroom 3.0.2
• jamroom jamroom 3.0.3
• jamroom jamroom 3.0.4
• jamroom jamroom 3.0.5
• jamroom jamroom 3.0.6
• jamroom jamroom 3.0.7
• jamroom jamroom 3.0.8
• jamroom jamroom 3.0.9
• jamroom jamroom 3.0.10
• jamroom jamroom 3.0.11
• jamroom jamroom 3.0.12
• jamroom jamroom 3.0.13
• jamroom jamroom 3.0.14
• jamroom jamroom 3.0.15
• jamroom jamroom 3.0.16
• jamroom jamroom 3.0.17
• jamroom jamroom 3.0.18
• jamroom jamroom 3.0.19
• jamroom jamroom 3.0.20
• jamroom jamroom 3.0.21
• jamroom jamroom 3.0.22
• jamroom jamroom 3.0.23
• jamroom jamroom 3.0.24
• jamroom jamroom 3.0.25
• jamroom jamroom 3.0.26
• jamroom jamroom 3.0.27
• jamroom jamroom 3.0.28
• jamroom jamroom 3.0.29
• jamroom jamroom 3.0.30
• jamroom jamroom 3.1.0
• jamroom jamroom 3.1.1
• jamroom jamroom 3.1.2
• jamroom jamroom 3.1.3
• jamroom jamroom 3.1.4
• jamroom jamroom 3.1.5
• jamroom jamroom 3.2.0
• jamroom jamroom 3.2.1
• jamroom jamroom 3.2.2
• jamroom jamroom 3.2.3
• jamroom jamroom 3.2.4
• jamroom jamroom 3.2.5
• jamroom jamroom 3.2.6
… and 10 more
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470 Vendor Advisory
- http://www.securityfocus.com/bid/34511 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49869 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/8423 www.exploit-db.com
- http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470 Vendor Advisory
- http://www.securityfocus.com/bid/34511 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49869 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/8423 www.exploit-db.com