CVE-2009-2313

Name of the Vulnerable Software and Affected Versions Jinzora Media Jukebox versions 2.8 and earlier

Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the name parameter.

Recommendations For versions 2.8 and earlier, consider restricting access to the index.php file until a fix is available. As a temporary workaround, avoid using the name parameter in the affected API endpoint until the issue is resolved.