Vulnerabilities > Jinzora > Jinzora > 0.9.4

DATE CVE VULNERABILITY TITLE RISK
2009-07-02 CVE-2009-2313 Path Traversal vulnerability in Jinzora
Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a ..
network
low complexity
jinzora CWE-22
7.5
2007-03-06 CVE-2006-7130 Code Injection vulnerability in Jinzora
PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter, a different vector than CVE-2006-6770.
network
low complexity
jinzora CWE-94
7.5