CVE-2009-1318
Published Apr 17, 2009
Last updated 7 years ago
Overview
- Description
- Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.5
- Impact score
- 6.4
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-22
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99C9C0E9-C1CC-4AA1-AE36-5550AE806649"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CD5550F-E364-4888-8A53-2A3DCE796A29"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61367DA9-F651-4FB3-8D48-1AF26066C15D"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66CD47A2-E6E0-4079-B872-F890520FDC26"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DA0695A-4CA9-4FE0-B9D1-A48335F57BB6"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4ABCF337-4928-45B8-8F99-725B5F081AEE"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28AB3D7B-7AE2-44C5-A704-825B33BFBB41"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C797B83-2A8C-49BE-8CDB-B6CFFBB9658E"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.0.9:a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38C2B402-A285-4959-B775-65B7A81AC242"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD305738-CAF6-4D26-9C20-2E30BCCB4ACD"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67567C47-1AC5-4916-99F2-B114E3B28087"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC892073-E68B-4BC7-B327-5A50423D5CB9"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB2BAE01-7CA6-4883-A94B-F8DCA3664DE0"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "922EBD12-2BDD-4DCB-95B4-859379699698"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0E76FF6-D673-410D-83D6-F120CBC916B5"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D96BCD95-57BE-49E3-AA36-553615FB8CA4"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F370EE5-826A-4180-83AD-13391DF8C1EC"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF74AC65-8D38-45F2-9D07-93414DDC3321"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4C09353-8A2D-4363-A44C-62EEDD6CD127"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F08631D7-BD25-4EEB-A980-8BD959D65296"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68B03674-5C17-4867-A4B7-3F81F9F25E1A"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "137287E7-5927-495F-9B9F-D04AC7E528E7"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B55161FB-A8BC-412D-8AF7-DBB50D251AB5"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04BAE9FF-377C-4DA8-BA15-6D54266B571A"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65E5D230-4B3F-40B4-BA76-CF6ED80C6A2D"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EE9AC6B-DEDA-4898-8D77-E1D0FE16A5A3"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA9222BC-4F3F-4ADA-BE29-C0E60D852B7B"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E269400E-65C9-4993-A469-C1722C72A89A"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A96EE17A-987A-4FA6-872C-2998F22A3B98"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "718A7588-74E6-4601-B3B7-0C3EA0A0D021"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6370A2F4-2D59-404F-87C6-FEDCACD4A64F"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5FFE8CE-0001-4221-A19C-2CB45A6CDA53"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9084E5E-29A9-4C1C-BBB4-0A05870908AE"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6947161-212C-48D0-A21F-DC5EFED5274B"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "473AEE4B-3F73-49EB-8E30-B1AEF11DD9D7"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45F96B70-E44F-4392-9983-E395D27DDF82"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12D8B1B7-2349-4E1F-B86F-C6CF5157F429"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63A95CFA-5E47-4D8D-B5A7-38880FC9324B"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E521F6F-D31C-4E08-AC06-120109DF4020"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B92F69F-85E9-4413-8474-24CF6186FB23"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DCA7B3B-3BBE-40E7-A750-D4911A7380AC"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1091207E-9F46-4F56-8D0F-C098BD2BBB81"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AE17521-A44E-4920-B50F-84EBA942D08B"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21E46C8F-0B90-4583-A52E-933B7333F0D7"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A911F967-8298-4C81-A6D3-0378595D41C3"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "213CE4E8-54D1-479D-8227-94035A982155"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "151F9FC7-0BAB-463F-BD3A-2F8582AD1C05"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16CCF11C-2464-48E8-8049-4838092C6547"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCB674DC-97AB-4D45-BAF1-71AE18FAB3CE"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05D0AA62-0F61-490D-AFC6-E571F4646A3D"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5D88374-B90E-4E85-BFA9-C874ABA08B06"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25655EBC-1E87-415E-9D20-0179F4FCD35D"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F208C24-E78B-49A0-8E61-90A1A7D475CA"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D49548E-EE58-4694-8099-032D3B65AA6E"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00DE05D9-4DC3-4F76-9314-E7AE267DA4DD"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DC05C6F-2816-4486-8A2D-A40A523439F8"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF05E590-EDA4-4F52-A3D9-A7D070484A07"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F34F3181-7CC9-45D4-AC45-D6A61AC58627"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "690D31B5-B81E-4FA7-8031-84438703490D"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D93B8842-96E2-4153-9F12-5A3A1DFB7C7D"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F1BB904-07E0-4C62-9365-C717D9FA18C0"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A2BFB5B-BC98-4604-A3E1-1B703D1C1577"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDC0BC1D-8BFD-4A57-A160-959CB93DE303"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCA6F88A-C89F-4014-B1FD-BBBA8A68B5E6"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44456A6C-AF1D-445F-BF71-5A80008F84FB"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EE15983-D025-47B0-87AB-B8E3818EA811"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EDCB191-2EB5-41C0-A354-6D790CF16083"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E394BD3-8B2A-4896-868E-C4927356B486"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41C8D61B-A5D8-4075-B2C6-119CC06AA4D9"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CC1F1D3-46B6-4AB2-9A5C-A13B89084031"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "111054E3-3BD4-4E97-980B-1E1DC539182F"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32EC8F1C-4014-4DF2-AB32-6D82327FE793"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA8FDF4F-1F22-4E2B-A5F6-F69F6FC62FCE"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C655733-74A4-4E0F-84EF-FE294F6753BC"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C86D6AC4-4641-4874-A8D2-26E486EE6B1C"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DCE23FB-700D-4E00-9B46-7AFD31D9358B"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6366FFF-8412-465C-AA08-7C9366785059"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1978E341-AF7E-49B8-8ADC-879F2B11D8E7"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC99103B-A43D-4370-A70B-D9DD2C665056"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D1F953D-8D25-4395-8A86-4E2DD5B2399F"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA61EDF9-CF08-407E-861E-98BF3B752834"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A406E79C-13CF-48A3-943E-0AACC8050411"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B97B0CB1-E4D7-4210-933B-AD114EFF0D53"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE551F7B-0F0F-480D-BDD5-0E51ACB595ED"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C10A858B-6771-4E23-9E93-CCA37F21089E"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93DD0B7C-609B-4E41-A44C-1F3B607EBC70"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF7DC010-399B-4DC7-82BC-BC2CAF19AD3A"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95BFE507-492C-452C-9BF1-3A38FC16D858"
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCB32428-77AA-44D0-9CBD-DFE7A1CFAD90"
}
],
"operator": "OR"
}
]
}
]