{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-04-14T00:00:00", "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "8423", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/8423"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470"}, {"name": "34511", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34511"}, {"name": "jamroom-index-file-include(49869)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49869"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-1318", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "8423", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/8423"}, {"name": "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470", "refsource": "CONFIRM", "url": "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470"}, {"name": "34511", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34511"}, {"name": "jamroom-index-file-include(49869)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49869"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T05:04:49.542Z"}, "title": "CVE Program Container", "references": [{"name": "8423", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/8423"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470"}, {"name": "34511", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/34511"}, {"name": "jamroom-index-file-include(49869)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49869"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-1318", "datePublished": "2009-04-17T10:00:00", "dateReserved": "2009-04-16T00:00:00", "dateUpdated": "2024-08-07T05:04:49.542Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:*", "matchCriteriaId": "99C9C0E9-C1CC-4AA1-AE36-5550AE806649", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "2CD5550F-E364-4888-8A53-2A3DCE796A29", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b1:*:*:*:*:*:*", "matchCriteriaId": "61367DA9-F651-4FB3-8D48-1AF26066C15D", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b2:*:*:*:*:*:*", "matchCriteriaId": "66CD47A2-E6E0-4079-B872-F890520FDC26", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b3:*:*:*:*:*:*", "matchCriteriaId": "3DA0695A-4CA9-4FE0-B9D1-A48335F57BB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b4:*:*:*:*:*:*", "matchCriteriaId": "4ABCF337-4928-45B8-8F99-725B5F081AEE", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b5:*:*:*:*:*:*", "matchCriteriaId": "28AB3D7B-7AE2-44C5-A704-825B33BFBB41", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "6C797B83-2A8C-49BE-8CDB-B6CFFBB9658E", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.0.9:a:*:*:*:*:*:*", "matchCriteriaId": "38C2B402-A285-4959-B775-65B7A81AC242", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:*", "matchCriteriaId": "AD305738-CAF6-4D26-9C20-2E30BCCB4ACD", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:*", "matchCriteriaId": "67567C47-1AC5-4916-99F2-B114E3B28087", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:*", "matchCriteriaId": "FC892073-E68B-4BC7-B327-5A50423D5CB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:*", "matchCriteriaId": "BB2BAE01-7CA6-4883-A94B-F8DCA3664DE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:rc2:*:*:*:*:*:*", "matchCriteriaId": "922EBD12-2BDD-4DCB-95B4-859379699698", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:rc3:*:*:*:*:*:*", "matchCriteriaId": "E0E76FF6-D673-410D-83D6-F120CBC916B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:*", "matchCriteriaId": "D96BCD95-57BE-49E3-AA36-553615FB8CA4", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:*", "matchCriteriaId": "9F370EE5-826A-4180-83AD-13391DF8C1EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:*", "matchCriteriaId": "DF74AC65-8D38-45F2-9D07-93414DDC3321", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:*", "matchCriteriaId": "D4C09353-8A2D-4363-A44C-62EEDD6CD127", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:*", "matchCriteriaId": "F08631D7-BD25-4EEB-A980-8BD959D65296", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:*", "matchCriteriaId": "68B03674-5C17-4867-A4B7-3F81F9F25E1A", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:*", "matchCriteriaId": "137287E7-5927-495F-9B9F-D04AC7E528E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:*", "matchCriteriaId": "B55161FB-A8BC-412D-8AF7-DBB50D251AB5", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:*", "matchCriteriaId": "04BAE9FF-377C-4DA8-BA15-6D54266B571A", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "65E5D230-4B3F-40B4-BA76-CF6ED80C6A2D", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b1:*:*:*:*:*:*", "matchCriteriaId": "5EE9AC6B-DEDA-4898-8D77-E1D0FE16A5A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b2:*:*:*:*:*:*", "matchCriteriaId": "CA9222BC-4F3F-4ADA-BE29-C0E60D852B7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b3:*:*:*:*:*:*", "matchCriteriaId": "E269400E-65C9-4993-A469-C1722C72A89A", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b4:*:*:*:*:*:*", "matchCriteriaId": "A96EE17A-987A-4FA6-872C-2998F22A3B98", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b5:*:*:*:*:*:*", "matchCriteriaId": "718A7588-74E6-4601-B3B7-0C3EA0A0D021", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b6:*:*:*:*:*:*", "matchCriteriaId": "6370A2F4-2D59-404F-87C6-FEDCACD4A64F", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b7:*:*:*:*:*:*", "matchCriteriaId": "E5FFE8CE-0001-4221-A19C-2CB45A6CDA53", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b8:*:*:*:*:*:*", "matchCriteriaId": "F9084E5E-29A9-4C1C-BBB4-0A05870908AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "C6947161-212C-48D0-A21F-DC5EFED5274B", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "473AEE4B-3F73-49EB-8E30-B1AEF11DD9D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "45F96B70-E44F-4392-9983-E395D27DDF82", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "12D8B1B7-2349-4E1F-B86F-C6CF5157F429", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "63A95CFA-5E47-4D8D-B5A7-38880FC9324B", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "0E521F6F-D31C-4E08-AC06-120109DF4020", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "2B92F69F-85E9-4413-8474-24CF6186FB23", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "9DCA7B3B-3BBE-40E7-A750-D4911A7380AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "1091207E-9F46-4F56-8D0F-C098BD2BBB81", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "3AE17521-A44E-4920-B50F-84EBA942D08B", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "21E46C8F-0B90-4583-A52E-933B7333F0D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "A911F967-8298-4C81-A6D3-0378595D41C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "213CE4E8-54D1-479D-8227-94035A982155", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "151F9FC7-0BAB-463F-BD3A-2F8582AD1C05", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "16CCF11C-2464-48E8-8049-4838092C6547", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*", "matchCriteriaId": "FCB674DC-97AB-4D45-BAF1-71AE18FAB3CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "05D0AA62-0F61-490D-AFC6-E571F4646A3D", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:*", "matchCriteriaId": "E5D88374-B90E-4E85-BFA9-C874ABA08B06", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "25655EBC-1E87-415E-9D20-0179F4FCD35D", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:*", "matchCriteriaId": "2F208C24-E78B-49A0-8E61-90A1A7D475CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:*", "matchCriteriaId": "8D49548E-EE58-4694-8099-032D3B65AA6E", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:*", "matchCriteriaId": "00DE05D9-4DC3-4F76-9314-E7AE267DA4DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:*", "matchCriteriaId": "7DC05C6F-2816-4486-8A2D-A40A523439F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:*", "matchCriteriaId": "EF05E590-EDA4-4F52-A3D9-A7D070484A07", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:*", "matchCriteriaId": "F34F3181-7CC9-45D4-AC45-D6A61AC58627", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:*", "matchCriteriaId": "690D31B5-B81E-4FA7-8031-84438703490D", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:*", "matchCriteriaId": "D93B8842-96E2-4153-9F12-5A3A1DFB7C7D", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:*", "matchCriteriaId": "4F1BB904-07E0-4C62-9365-C717D9FA18C0", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:*", "matchCriteriaId": "1A2BFB5B-BC98-4604-A3E1-1B703D1C1577", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:*", "matchCriteriaId": "DDC0BC1D-8BFD-4A57-A160-959CB93DE303", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "DCA6F88A-C89F-4014-B1FD-BBBA8A68B5E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b1:*:*:*:*:*:*", "matchCriteriaId": "44456A6C-AF1D-445F-BF71-5A80008F84FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b2:*:*:*:*:*:*", "matchCriteriaId": "4EE15983-D025-47B0-87AB-B8E3818EA811", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b3:*:*:*:*:*:*", "matchCriteriaId": "6EDCB191-2EB5-41C0-A354-6D790CF16083", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0E394BD3-8B2A-4896-868E-C4927356B486", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "41C8D61B-A5D8-4075-B2C6-119CC06AA4D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "9CC1F1D3-46B6-4AB2-9A5C-A13B89084031", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "111054E3-3BD4-4E97-980B-1E1DC539182F", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "32EC8F1C-4014-4DF2-AB32-6D82327FE793", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "BA8FDF4F-1F22-4E2B-A5F6-F69F6FC62FCE", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "5C655733-74A4-4E0F-84EF-FE294F6753BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "C86D6AC4-4641-4874-A8D2-26E486EE6B1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "1DCE23FB-700D-4E00-9B46-7AFD31D9358B", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "A6366FFF-8412-465C-AA08-7C9366785059", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "1978E341-AF7E-49B8-8ADC-879F2B11D8E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "CC99103B-A43D-4370-A70B-D9DD2C665056", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "8D1F953D-8D25-4395-8A86-4E2DD5B2399F", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "FA61EDF9-CF08-407E-861E-98BF3B752834", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "A406E79C-13CF-48A3-943E-0AACC8050411", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "B97B0CB1-E4D7-4210-933B-AD114EFF0D53", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "FE551F7B-0F0F-480D-BDD5-0E51ACB595ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "C10A858B-6771-4E23-9E93-CCA37F21089E", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "93DD0B7C-609B-4E41-A44C-1F3B607EBC70", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "AF7DC010-399B-4DC7-82BC-BC2CAF19AD3A", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.8:*:*:*:*:*:*:*", "matchCriteriaId": "95BFE507-492C-452C-9BF1-3A38FC16D858", "vulnerable": true}, {"criteria": "cpe:2.3:a:jamroom:jamroom:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "FCB32428-77AA-44D0-9CBD-DFE7A1CFAD90", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de salto de directorio en index.php en Jamroom v3.1.2, v3.2.3 a v3.2.6, v4.0.2, y posiblemente otras versiones antes de v3.4.0 permite a atacantes remotos incluir ficheros de su elecci\u00f3n a trav\u00e9s de secuencias de salto de directorio en el par\u00e1metro \"t\"."}], "id": "CVE-2009-1318", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-04-17T14:08:52.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/34511"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49869"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/8423"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/34511"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49869"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/8423"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}