Published: 17/04/2009 Updated: 29/09/2017

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 655

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 up to and including 3.2.6, 4.0.2, and possibly other versions prior to 3.4.0 allows remote malicious users to include arbitrary files via directory traversal sequences in the t parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jamroom jamroom 2.0.9
jamroom jamroom 2.6.10
jamroom jamroom 2.60
jamroom jamroom 2.67
jamroom jamroom 1.0
jamroom jamroom 2.6.11
jamroom jamroom 2.66
jamroom jamroom 3.0
jamroom jamroom 3.0.10
jamroom jamroom 3.0.17
jamroom jamroom 3.0.18
jamroom jamroom 3.0.2
jamroom jamroom 3.0.28
jamroom jamroom 3.0.29
jamroom jamroom 3.0.5
jamroom jamroom 3.1.4
jamroom jamroom 3.1.5
jamroom jamroom 3.3.0
jamroom jamroom 3.3.1
jamroom jamroom 3.3.6
jamroom jamroom 4.0.2
jamroom jamroom 2.65
jamroom jamroom 2.6.12
jamroom jamroom 2.64
jamroom jamroom 2.63
jamroom jamroom 3.0.12
jamroom jamroom 3.0.11
jamroom jamroom 3.0.16
jamroom jamroom 3.0.19
jamroom jamroom 3.0.26
jamroom jamroom 3.0.27
jamroom jamroom 3.0.6
jamroom jamroom 3.1.3
jamroom jamroom 3.1.0
jamroom jamroom 3.2.5
jamroom jamroom 3.2.6
jamroom jamroom 3.3.5
jamroom jamroom 3.3.7
jamroom jamroom
jamroom jamroom 2.62
jamroom jamroom 2.61
jamroom jamroom 2.69
jamroom jamroom 2.68
jamroom jamroom 3.0.1
jamroom jamroom 3.0.21
jamroom jamroom 3.0.20
jamroom jamroom 3.0.30
jamroom jamroom 3.0.4
jamroom jamroom 3.0.8
jamroom jamroom 3.0.7
jamroom jamroom 3.0.9
jamroom jamroom 3.1.2
jamroom jamroom 3.2.3
jamroom jamroom 3.2.4
jamroom jamroom 3.3.3
jamroom jamroom 3.3.8
jamroom jamroom 3.0.13
jamroom jamroom 3.0.15
jamroom jamroom 3.0.14
jamroom jamroom 3.0.22
jamroom jamroom 3.0.3
jamroom jamroom 3.0.23
jamroom jamroom 3.0.24
jamroom jamroom 3.0.25
jamroom jamroom 3.1.1
jamroom jamroom 3.2.0
jamroom jamroom 3.2.1
jamroom jamroom 3.2.2
jamroom jamroom 3.3.2
jamroom jamroom 3.3.4

[o]-----------------------------------------------------------------------------------------------------------------[x] | Local File Include Vulnerability | [o]------------------------------------------------------------------------------------[o] | Software : Jamroom version 312 , 323 , 3 ...

CWE-22 http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470 http://www.securityfocus.com/bid/34511 https://exchange.xforce.ibmcloud.com/vulnerabilities/49869 https://www.exploit-db.com/exploits/8423 https://nvd.nist.gov https://www.exploit-db.com/exploits/8423/

CVE-2009-1318

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect