CVE-2009-1318

{"id": "CVE-2009-1318", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-04-17T14:08:52.000", "references": [{"url": "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/34511", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49869", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/8423", "source": "cve@mitre.org"}, {"url": "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/34511", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49869", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/8423", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de salto de directorio en index.php en Jamroom v3.1.2, v3.2.3 a v3.2.6, v4.0.2, y posiblemente otras versiones antes de v3.4.0 permite a atacantes remotos incluir ficheros de su elecci\u00f3n a trav\u00e9s de secuencias de salto de directorio en el par\u00e1metro \"t\"."}], "lastModified": "2024-11-21T01:02:10.913", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99C9C0E9-C1CC-4AA1-AE36-5550AE806649"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CD5550F-E364-4888-8A53-2A3DCE796A29"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61367DA9-F651-4FB3-8D48-1AF26066C15D"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66CD47A2-E6E0-4079-B872-F890520FDC26"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3DA0695A-4CA9-4FE0-B9D1-A48335F57BB6"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4ABCF337-4928-45B8-8F99-725B5F081AEE"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28AB3D7B-7AE2-44C5-A704-825B33BFBB41"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C797B83-2A8C-49BE-8CDB-B6CFFBB9658E"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.0.9:a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38C2B402-A285-4959-B775-65B7A81AC242"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD305738-CAF6-4D26-9C20-2E30BCCB4ACD"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67567C47-1AC5-4916-99F2-B114E3B28087"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC892073-E68B-4BC7-B327-5A50423D5CB9"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB2BAE01-7CA6-4883-A94B-F8DCA3664DE0"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "922EBD12-2BDD-4DCB-95B4-859379699698"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0E76FF6-D673-410D-83D6-F120CBC916B5"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D96BCD95-57BE-49E3-AA36-553615FB8CA4"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F370EE5-826A-4180-83AD-13391DF8C1EC"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF74AC65-8D38-45F2-9D07-93414DDC3321"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4C09353-8A2D-4363-A44C-62EEDD6CD127"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F08631D7-BD25-4EEB-A980-8BD959D65296"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68B03674-5C17-4867-A4B7-3F81F9F25E1A"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "137287E7-5927-495F-9B9F-D04AC7E528E7"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B55161FB-A8BC-412D-8AF7-DBB50D251AB5"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04BAE9FF-377C-4DA8-BA15-6D54266B571A"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65E5D230-4B3F-40B4-BA76-CF6ED80C6A2D"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EE9AC6B-DEDA-4898-8D77-E1D0FE16A5A3"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA9222BC-4F3F-4ADA-BE29-C0E60D852B7B"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E269400E-65C9-4993-A469-C1722C72A89A"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A96EE17A-987A-4FA6-872C-2998F22A3B98"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "718A7588-74E6-4601-B3B7-0C3EA0A0D021"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6370A2F4-2D59-404F-87C6-FEDCACD4A64F"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5FFE8CE-0001-4221-A19C-2CB45A6CDA53"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9084E5E-29A9-4C1C-BBB4-0A05870908AE"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6947161-212C-48D0-A21F-DC5EFED5274B"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "473AEE4B-3F73-49EB-8E30-B1AEF11DD9D7"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45F96B70-E44F-4392-9983-E395D27DDF82"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12D8B1B7-2349-4E1F-B86F-C6CF5157F429"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63A95CFA-5E47-4D8D-B5A7-38880FC9324B"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E521F6F-D31C-4E08-AC06-120109DF4020"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B92F69F-85E9-4413-8474-24CF6186FB23"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DCA7B3B-3BBE-40E7-A750-D4911A7380AC"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1091207E-9F46-4F56-8D0F-C098BD2BBB81"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3AE17521-A44E-4920-B50F-84EBA942D08B"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21E46C8F-0B90-4583-A52E-933B7333F0D7"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A911F967-8298-4C81-A6D3-0378595D41C3"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "213CE4E8-54D1-479D-8227-94035A982155"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "151F9FC7-0BAB-463F-BD3A-2F8582AD1C05"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16CCF11C-2464-48E8-8049-4838092C6547"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCB674DC-97AB-4D45-BAF1-71AE18FAB3CE"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05D0AA62-0F61-490D-AFC6-E571F4646A3D"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5D88374-B90E-4E85-BFA9-C874ABA08B06"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25655EBC-1E87-415E-9D20-0179F4FCD35D"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F208C24-E78B-49A0-8E61-90A1A7D475CA"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D49548E-EE58-4694-8099-032D3B65AA6E"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00DE05D9-4DC3-4F76-9314-E7AE267DA4DD"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DC05C6F-2816-4486-8A2D-A40A523439F8"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF05E590-EDA4-4F52-A3D9-A7D070484A07"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F34F3181-7CC9-45D4-AC45-D6A61AC58627"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "690D31B5-B81E-4FA7-8031-84438703490D"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D93B8842-96E2-4153-9F12-5A3A1DFB7C7D"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F1BB904-07E0-4C62-9365-C717D9FA18C0"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A2BFB5B-BC98-4604-A3E1-1B703D1C1577"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DDC0BC1D-8BFD-4A57-A160-959CB93DE303"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCA6F88A-C89F-4014-B1FD-BBBA8A68B5E6"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44456A6C-AF1D-445F-BF71-5A80008F84FB"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EE15983-D025-47B0-87AB-B8E3818EA811"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6EDCB191-2EB5-41C0-A354-6D790CF16083"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E394BD3-8B2A-4896-868E-C4927356B486"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41C8D61B-A5D8-4075-B2C6-119CC06AA4D9"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CC1F1D3-46B6-4AB2-9A5C-A13B89084031"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "111054E3-3BD4-4E97-980B-1E1DC539182F"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32EC8F1C-4014-4DF2-AB32-6D82327FE793"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA8FDF4F-1F22-4E2B-A5F6-F69F6FC62FCE"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C655733-74A4-4E0F-84EF-FE294F6753BC"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C86D6AC4-4641-4874-A8D2-26E486EE6B1C"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DCE23FB-700D-4E00-9B46-7AFD31D9358B"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6366FFF-8412-465C-AA08-7C9366785059"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1978E341-AF7E-49B8-8ADC-879F2B11D8E7"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC99103B-A43D-4370-A70B-D9DD2C665056"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D1F953D-8D25-4395-8A86-4E2DD5B2399F"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA61EDF9-CF08-407E-861E-98BF3B752834"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A406E79C-13CF-48A3-943E-0AACC8050411"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B97B0CB1-E4D7-4210-933B-AD114EFF0D53"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE551F7B-0F0F-480D-BDD5-0E51ACB595ED"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C10A858B-6771-4E23-9E93-CCA37F21089E"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93DD0B7C-609B-4E41-A44C-1F3B607EBC70"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF7DC010-399B-4DC7-82BC-BC2CAF19AD3A"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95BFE507-492C-452C-9BF1-3A38FC16D858"}, {"criteria": "cpe:2.3:a:jamroom:jamroom:4.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCB32428-77AA-44D0-9CBD-DFE7A1CFAD90"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}