VULNERABILITY INTELLIGENCE

CVE-2009-1318

CVSS score6.5 MEDIUM

EPSS probability1.95%

CISA KEVNot currently listed

Published2009-04-17

Last modified2026-06-16

Description

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.