CyberSec.Space Logo
CVEブラウザに戻る

CVE-2009-2313

HIGH
7.5
CVSS Severity Score
EPSS Score0.1870%
EPSS Percentile34.86th
Published2009年7月2日
Last Modified2026年4月23日

Vulnerability Description

Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter.

Affected Platforms (CPE)

📦
Jinzora

Jinzora

<= 2.8
📦
Jinzora

Jinzora

= 0.1.1
📦
Jinzora

Jinzora

= 0.2
📦
Jinzora

Jinzora

= 0.3
📦
Jinzora

Jinzora

= 0.3
📦
Jinzora

Jinzora

= 0.3
📦
Jinzora

Jinzora

= 0.3.1
📦
Jinzora

Jinzora

= 0.4
📦
Jinzora

Jinzora

= 0.5
📦
Jinzora

Jinzora

= 0.6.2
📦
Jinzora

Jinzora

= 0.7
📦
Jinzora

Jinzora

= 0.8.1
📦
Jinzora

Jinzora

= 0.8.2
📦
Jinzora

Jinzora

= 0.9
📦
Jinzora

Jinzora

= 0.9.1
📦
Jinzora

Jinzora

= 0.9.2
📦
Jinzora

Jinzora

= 0.9.3
📦
Jinzora

Jinzora

= 0.9.4
📦
Jinzora

Jinzora

= 0.9.5
📦
Jinzora

Jinzora

= 1.0.1
📦
Jinzora

Jinzora

= 1.1
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0
📦
Jinzora

Jinzora

= 2.0.1
📦
Jinzora

Jinzora

= 2.1
📦
Jinzora

Jinzora

= 2.2
📦
Jinzora

Jinzora

= 2.3
📦
Jinzora

Jinzora

= 2.3.1
📦
Jinzora

Jinzora

= 2.3.2
📦
Jinzora

Jinzora

= 2.3.3
📦
Jinzora

Jinzora

= 2.3.4
📦
Jinzora

Jinzora

= 2.3.5
📦
Jinzora

Jinzora

= 2.3.6
📦
Jinzora

Jinzora

= 2.3.7
📦
Jinzora

Jinzora

= 2.5
📦
Jinzora

Jinzora

= 2.5.1
📦
Jinzora

Jinzora

= 2.6
📦
Jinzora

Jinzora

= 2.6.1
📦
Jinzora

Jinzora

= 2.7
📦
Jinzora

Jinzora

= 2.7.5

References & Advisories

🔗 http://www.exploit-db.com/exploits/8278
🔗 http://www.exploit-db.com/exploits/8278

関連する脆弱性情報

CVE-2005-224910.0

Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion ...

CVE-2006-713110.0

PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via ...

CVE-2005-33307.5

The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, ...

CVE-2006-71307.5

PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers t...