CVE-2009-1318
Summary
| CVE | CVE-2009-1318 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-04-17 14:08:52 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:S/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Jamroom | Jamroom | All | All | All | All |
| Application | Jamroom | Jamroom | 1.0 | All | All | All |
| Application | Jamroom | Jamroom | 1.0 | b1 | All | All |
| Application | Jamroom | Jamroom | 1.0 | b2 | All | All |
| Application | Jamroom | Jamroom | 1.0 | b3 | All | All |
| Application | Jamroom | Jamroom | 1.0 | b4 | All | All |
| Application | Jamroom | Jamroom | 1.0 | b5 | All | All |
| Application | Jamroom | Jamroom | 2.0.9 | All | All | All |
| Application | Jamroom | Jamroom | 2.0.9 | a | All | All |
| Application | Jamroom | Jamroom | 2.6.10 | All | All | All |
| Application | Jamroom | Jamroom | 2.6.11 | All | All | All |
| Application | Jamroom | Jamroom | 2.6.12 | All | All | All |
| Application | Jamroom | Jamroom | 2.60 | All | All | All |
| Application | Jamroom | Jamroom | 2.60 | rc2 | All | All |
| Application | Jamroom | Jamroom | 2.60 | rc3 | All | All |
| Application | Jamroom | Jamroom | 2.61 | All | All | All |
| Application | Jamroom | Jamroom | 2.62 | All | All | All |
| Application | Jamroom | Jamroom | 2.63 | All | All | All |
| Application | Jamroom | Jamroom | 2.64 | All | All | All |
| Application | Jamroom | Jamroom | 2.65 | All | All | All |
| Application | Jamroom | Jamroom | 2.66 | All | All | All |
| Application | Jamroom | Jamroom | 2.67 | All | All | All |
| Application | Jamroom | Jamroom | 2.68 | All | All | All |
| Application | Jamroom | Jamroom | 2.69 | All | All | All |
| Application | Jamroom | Jamroom | 3.0 | All | All | All |
| Application | Jamroom | Jamroom | 3.0 | b1 | All | All |
| Application | Jamroom | Jamroom | 3.0 | b2 | All | All |
| Application | Jamroom | Jamroom | 3.0 | b3 | All | All |
| Application | Jamroom | Jamroom | 3.0 | b4 | All | All |
| Application | Jamroom | Jamroom | 3.0 | b5 | All | All |
| Application | Jamroom | Jamroom | 3.0 | b6 | All | All |
| Application | Jamroom | Jamroom | 3.0 | b7 | All | All |
| Application | Jamroom | Jamroom | 3.0 | b8 | All | All |
| Application | Jamroom | Jamroom | 3.0.1 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.10 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.11 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.12 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.13 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.14 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.15 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.16 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.17 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.18 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.19 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.2 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.20 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.21 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.22 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.23 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.24 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.25 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.26 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.27 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.28 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.29 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.3 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.30 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.4 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.5 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.6 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.7 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.8 | All | All | All |
| Application | Jamroom | Jamroom | 3.0.9 | All | All | All |
| Application | Jamroom | Jamroom | 3.1.0 | All | All | All |
| Application | Jamroom | Jamroom | 3.1.0 | b1 | All | All |
| Application | Jamroom | Jamroom | 3.1.0 | b2 | All | All |
| Application | Jamroom | Jamroom | 3.1.0 | b3 | All | All |
| Application | Jamroom | Jamroom | 3.1.1 | All | All | All |
| Application | Jamroom | Jamroom | 3.1.2 | All | All | All |
| Application | Jamroom | Jamroom | 3.1.3 | All | All | All |
| Application | Jamroom | Jamroom | 3.1.4 | All | All | All |
| Application | Jamroom | Jamroom | 3.1.5 | All | All | All |
| Application | Jamroom | Jamroom | 3.2.0 | All | All | All |
| Application | Jamroom | Jamroom | 3.2.1 | All | All | All |
| Application | Jamroom | Jamroom | 3.2.2 | All | All | All |
| Application | Jamroom | Jamroom | 3.2.3 | All | All | All |
| Application | Jamroom | Jamroom | 3.2.4 | All | All | All |
| Application | Jamroom | Jamroom | 3.2.5 | All | All | All |
| Application | Jamroom | Jamroom | 3.2.6 | All | All | All |
| Application | Jamroom | Jamroom | 3.3.0 | All | All | All |
| Application | Jamroom | Jamroom | 3.3.1 | All | All | All |
| Application | Jamroom | Jamroom | 3.3.2 | All | All | All |
| Application | Jamroom | Jamroom | 3.3.3 | All | All | All |
| Application | Jamroom | Jamroom | 3.3.4 | All | All | All |
| Application | Jamroom | Jamroom | 3.3.5 | All | All | All |
| Application | Jamroom | Jamroom | 3.3.6 | All | All | All |
| Application | Jamroom | Jamroom | 3.3.7 | All | All | All |
| Application | Jamroom | Jamroom | 3.3.8 | All | All | All |
| Application | Jamroom | Jamroom | 4.0.2 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Jamroom (index.php t) Local File Inclusion Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.exploit-db.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Jamroom: Tracker: Bogus milw0rm security advisory | af854a3a-2127-422b-91ae-364da2661108 | www.jamroom.net | Vendor Advisory |
| Jamroom 't' Parameter Local File Include Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Exploit |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.