CVE-2008-4522: Jesse-Web Jmweb MP3 Music Audio Search And Download Script

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the src parameter to (1) listen.php and (2) download.php.

Affected products

• Jesse-Web Jmweb MP3 Music Audio Search And Download Script: any version

Published 2008-10-09. Last modified 2026-06-16.