CVE-2009-1318

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

1.95% chance of exploitation in the next 30 days, 79th percentile

Published

2009-04-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8423

References

• CVE Record
• NVD entry

Related

• CVE-2009-1317
• CVE-2009-1319
• CVE-2009-1316
• CVE-2009-1321
• CVE-2009-1315
• CVE-2009-1322