Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

jinzora CVEs

Beta · best-effort

6 CVEs tagged to vendor jinzora — 2 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2009-2313

Published Jul 2, 2009

Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2008-0877

Published Feb 21, 2008

Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) frontend, (2) set_fron…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-7130

Published Mar 6, 2007

PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2006-7131

Published Mar 6, 2007

PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the web_root parameter.

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2006-6770

Published Dec 27, 2006

Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-2249

Published Jul 13, 2005

Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerability.

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-6 of 6 CVEsPage 1 of 1