CVE-2009-2313: Jinzora

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter.

Affected products

• Jinzora Jinzora: up to and including 2.8; version 0.1.1 only; version 0.2 only; version 0.3 only; version 0.3.1 only; version 0.4 only; …

Published 2009-07-02. Last modified 2026-06-16.