{"id":"CVE-2009-1318","aliases":["EUVD-2009-1316","GHSA-55m7-fhr5-ph85"],"status":"published","title":"Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and...","description":"Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01954,"percentile":0.80398,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2009-04-17T10:00:00Z","modified":"2026-06-16T23:07:01Z","exploits":[{"source":"exploitdb","id":"EDB-8423","title":"Jamroom 4.0.2 - 't' Local File Inclusion","type":"webapps","platform":"php","date":"2009-04-14","verified":true,"url":"https://www.exploit-db.com/exploits/8423"}],"products":[{"vendor":"jamroom","product":"jamroom"}],"references":[{"url":"https://www.exploit-db.com/exploits/8423","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://www.jamroom.net/index.php?m=td_tracker\u0026o=view\u0026id=1470","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34511","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49869","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1318"},{"url":"https://github.com/advisories/GHSA-55m7-fhr5-ph85"}],"sources":{"cve":[{"id":"CVE-2009-1318","description":"Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.","status":"published","published":"2009-04-17T10:00:00Z","modified":"2024-08-07T05:04:49.542Z","updated_at":"2026-11-02T14:33:25.126493Z"}],"euvd":[{"id":"EUVD-2009-1316","description":"Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.","status":"published","published":"2009-04-17T10:00:00Z","modified":"2024-08-07T05:04:49Z","updated_at":"2026-11-03T01:39:22.412498Z"}],"ghsa":[{"id":"GHSA-55m7-fhr5-ph85","title":"Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and...","description":"Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.","status":"published","published":"2022-05-02T03:24:07Z","modified":"2023-01-31T05:07:27Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:49:13.084976Z"}],"nvd":[{"id":"CVE-2009-1318","description":"Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.","status":"published","published":"2009-04-17T14:08:52Z","modified":"2026-06-16T23:07:01.477Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:01:35.136779Z"}]}}