Read the docs
TI-2009-01253 Aliases CVE-2009-1318GHSA-55m7-fhr5-ph85

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6…

Priority LOW 33CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.

Why it matters now

EPSS 0.01954 80th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 89

CPEVersionsRoleVendor
cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:*all versionsVulnerableJamroom
cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:*1.0VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:1.0:b1:*:*:*:*:*:*1.0 b1VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:1.0:b2:*:*:*:*:*:*1.0 b2VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:1.0:b3:*:*:*:*:*:*1.0 b3VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:1.0:b4:*:*:*:*:*:*1.0 b4VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:1.0:b5:*:*:*:*:*:*1.0 b5VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.0.9:*:*:*:*:*:*:*2.0.9VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.0.9:a:*:*:*:*:*:*2.0.9 aVulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:*2.6.10VulnerableJamroom
  • cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:1.0:b1:*:*:*:*:*:* Versions 1.0 b1 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:1.0:b2:*:*:*:*:*:* Versions 1.0 b2 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:1.0:b3:*:*:*:*:*:* Versions 1.0 b3 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:1.0:b4:*:*:*:*:*:* Versions 1.0 b4 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:1.0:b5:*:*:*:*:*:* Versions 1.0 b5 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.0.9:*:*:*:*:*:*:* Versions 2.0.9 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.0.9:a:*:*:*:*:*:* Versions 2.0.9 a Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:* Versions 2.6.10 Vulnerable ·Jamroom
Show 79 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:*2.6.11VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:*2.6.12VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:*2.60VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.60:rc2:*:*:*:*:*:*2.60 rc2VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.60:rc3:*:*:*:*:*:*2.60 rc3VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:*2.61VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:*2.62VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:*2.63VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:*2.64VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:*2.65VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:*2.66VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:*2.67VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:*2.68VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:*2.69VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:*3.0VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0:b1:*:*:*:*:*:*3.0 b1VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0:b2:*:*:*:*:*:*3.0 b2VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0:b3:*:*:*:*:*:*3.0 b3VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0:b4:*:*:*:*:*:*3.0 b4VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0:b5:*:*:*:*:*:*3.0 b5VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0:b6:*:*:*:*:*:*3.0 b6VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0:b7:*:*:*:*:*:*3.0 b7VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0:b8:*:*:*:*:*:*3.0 b8VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:*3.0.4VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:*3.0.5VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:*3.0.6VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:*3.0.7VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:*3.0.8VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:*3.0.9VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:*3.0.10VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:*3.0.11VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:*3.0.12VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:*3.0.13VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:*3.0.14VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:*3.0.15VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*3.0.16VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:*3.0.17VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:*3.0.18VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:*3.0.19VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:*3.0.20VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:*3.0.21VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:*3.0.22VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:*3.0.23VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:*3.0.24VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:*3.0.25VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:*3.0.26VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:*3.0.27VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:*3.0.28VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:*3.0.29VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:*3.0.30VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:*3.1.0VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.1.0:b1:*:*:*:*:*:*3.1.0 b1VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.1.0:b2:*:*:*:*:*:*3.1.0 b2VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.1.0:b3:*:*:*:*:*:*3.1.0 b3VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:*3.1.2VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:*3.1.3VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:*3.1.4VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:*3.1.5VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:*3.2.0VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:*3.2.2VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:*3.2.3VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:*3.2.4VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:*3.2.5VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:*3.2.6VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*3.3.0VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*3.3.3VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*3.3.4VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*3.3.5VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:*3.3.6VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:*3.3.7VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:3.3.8:*:*:*:*:*:*:*3.3.8VulnerableJamroom
cpe:2.3:a:jamroom:jamroom:4.0.2:*:*:*:*:*:*:*4.0.2VulnerableJamroom
  • cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:* Versions 2.6.11 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:* Versions 2.6.12 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:* Versions 2.60 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.60:rc2:*:*:*:*:*:* Versions 2.60 rc2 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.60:rc3:*:*:*:*:*:* Versions 2.60 rc3 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:* Versions 2.61 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:* Versions 2.62 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:* Versions 2.63 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:* Versions 2.64 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:* Versions 2.65 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:* Versions 2.66 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:* Versions 2.67 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:* Versions 2.68 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:* Versions 2.69 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0:b1:*:*:*:*:*:* Versions 3.0 b1 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0:b2:*:*:*:*:*:* Versions 3.0 b2 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0:b3:*:*:*:*:*:* Versions 3.0 b3 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0:b4:*:*:*:*:*:* Versions 3.0 b4 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0:b5:*:*:*:*:*:* Versions 3.0 b5 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0:b6:*:*:*:*:*:* Versions 3.0 b6 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0:b7:*:*:*:*:*:* Versions 3.0 b7 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0:b8:*:*:*:*:*:* Versions 3.0 b8 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:* Versions 3.0.6 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:* Versions 3.0.7 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:* Versions 3.0.8 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:* Versions 3.0.9 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:* Versions 3.0.10 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:* Versions 3.0.11 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:* Versions 3.0.12 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:* Versions 3.0.13 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:* Versions 3.0.14 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:* Versions 3.0.15 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:* Versions 3.0.16 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:* Versions 3.0.17 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:* Versions 3.0.18 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:* Versions 3.0.19 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:* Versions 3.0.20 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:* Versions 3.0.21 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:* Versions 3.0.22 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:* Versions 3.0.23 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:* Versions 3.0.24 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:* Versions 3.0.25 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:* Versions 3.0.26 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:* Versions 3.0.27 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:* Versions 3.0.28 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:* Versions 3.0.29 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:* Versions 3.0.30 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.1.0:b1:*:*:*:*:*:* Versions 3.1.0 b1 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.1.0:b2:*:*:*:*:*:* Versions 3.1.0 b2 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.1.0:b3:*:*:*:*:*:* Versions 3.1.0 b3 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:* Versions 3.1.3 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:* Versions 3.1.4 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:* Versions 3.1.5 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:* Versions 3.3.0 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:* Versions 3.3.7 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:3.3.8:*:*:*:*:*:*:* Versions 3.3.8 Vulnerable ·Jamroom
  • cpe:2.3:a:jamroom:jamroom:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Jamroom

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-1318
  2. 2026-10-03 Alias added: GHSA-55m7-fhr5-ph85

References

Exploit 1

Advisory 1

  • TI-2008-02760 PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in… CVSS 2.0HIGH 9.3
  • TI-2008-03237 Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors. CVSS 2.0HIGH 10.0
  • TI-2008-03236 The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows… CVSS 2.0HIGH 7.5
  • TI-2008-02757 PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in… CVSS 2.0HIGH 7.5
  • TI-2012-05407 Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field. CVSS 3.0MEDIUM 6.1
  • TI-2006-04876 Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly… CVSS 2.0MEDIUM 5.1
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences