CVE-2009-1318: Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly o...

Security readout for executives and security teams

CVE-2009-1318 is a Jamroom index.php directory traversal issue. A remote attacker could use the t parameter to make vulnerable versions include arbitrary files. That can expose sensitive files or enable deeper compromise depending on server configuration. The public bundle confirms old Jamroom versions are affected, but gives no CVSS score or current exploitation evidence. Exposure is most likely on legacy public Jamroom sites still running the named versions. Internet-facing deployments are the main concern because the source description says remote attackers can trigger the issue. Treat this as a high-priority legacy web application risk if Jamroom is externally exposed. No active exploitation is confirmed in the bundle, but arbitrary file inclusion plus public exploit reference makes unpatched public systems unsuitable for continued exposure. Mitigation focus: Inventory all Jamroom deployments and confirm exact versions.; Upgrade affected Jamroom instances using vendor guidance where available.; Decommission or isolate unsupported legacy Jamroom sites..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.