CyberSec.Space Logo
Back to CVE Browser

CVE-2009-2313

HIGH
7.5
CVSS Severity Score
EPSS Score0.1870%
EPSS Percentile34.86th
PublishedJul 2, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter.

Affected Platforms (CPE)

📦
Jinzora

Jinzora

<= 2.8
📦
Jinzora

Jinzora

= 0.1.1
📦
Jinzora

Jinzora

= 0.2
📦
Jinzora

Jinzora

= 0.3
📦
Jinzora

Jinzora

= 0.3
📦
Jinzora

Jinzora

= 0.3
📦
Jinzora

Jinzora

= 0.3.1
📦
Jinzora

Jinzora

= 0.4
📦
Jinzora

Jinzora

= 0.5
📦
Jinzora

Jinzora

= 0.6.2
📦
Jinzora

Jinzora

= 0.7
📦
Jinzora

Jinzora

= 0.8.1
📦
Jinzora

Jinzora

= 0.8.2
📦
Jinzora

Jinzora

= 0.9
📦
Jinzora

Jinzora

= 0.9.1
📦
Jinzora

Jinzora

= 0.9.2
📦
Jinzora

Jinzora

= 0.9.3
📦
Jinzora

Jinzora

= 0.9.4
📦
Jinzora

Jinzora

= 0.9.5
📦
Jinzora

Jinzora

= 1.0.1
📦
Jinzora

Jinzora

= 1.1
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0.1
📦
Jinzora

Jinzora

= 2.1
📦
Jinzora

Jinzora

= 2.2
📦
Jinzora

Jinzora

= 2.3
📦
Jinzora

Jinzora

= 2.3.1
📦
Jinzora

Jinzora

= 2.3.2
📦
Jinzora

Jinzora

= 2.3.3
📦
Jinzora

Jinzora

= 2.3.4
📦
Jinzora

Jinzora

= 2.3.5
📦
Jinzora

Jinzora

= 2.3.6
📦
Jinzora

Jinzora

= 2.3.7
📦
Jinzora

Jinzora

= 2.5
📦
Jinzora

Jinzora

= 2.5.1
📦
Jinzora

Jinzora

= 2.6
📦
Jinzora

Jinzora

= 2.6.1
📦
Jinzora

Jinzora

= 2.7
📦
Jinzora

Jinzora

= 2.7.5

References & Advisories

🔗 http://www.exploit-db.com/exploits/8278
🔗 http://www.exploit-db.com/exploits/8278

Related Vulnerabilities

CVE-2005-224910.0

Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion ...

CVE-2006-713110.0

PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via ...

CVE-2005-33307.5

The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, ...

CVE-2006-71307.5

PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers t...