GCVE - cpe:2.3:a:jinzora:jinzora:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jinzora:jinzora:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jinzora (`9ae2cd4b-79e1-5839-ba97-b13de7e29900`)
Product	Jinzora (`b6f4778f-5825-5614-a0a8-23329997eeb4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/bjdodson/jinzora`	purl2cpe	2026-06-01 10:17:55.415564
`pkg:github/jinzora/jinzora3`	purl2cpe	2026-06-01 10:17:55.415566
`pkg:sourceforge/jinzora`	purl2cpe	2026-06-01 10:17:55.415567

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2313`	vulnerable	2026-06-08 04:51:27.748335	Details available Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter. Published: 2009-07-02T10:00:00.000Z Updated: 2024-08-07T05:44:56.073Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/8278	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7130`	vulnerable	2026-06-08 04:49:30.392683	Details available PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter, a different vector than CVE-2006-6770. Published: 2007-03-06T01:00:00.000Z Updated: 2024-08-07T20:50:06.081Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/2512 https://exchange.xforce.ibmcloud.com/vulnerabilities/29436 http://securityreason.com/securityalert/2351 http://www.securityfocus.com/archive/1/448290/100/0/threaded http://www.securityfocus.com/bid/20446	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6770`	vulnerable	2026-06-08 04:49:29.714239	Details available Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter in (1) popup.php, (2) rss.php, (3) ajax_request.php, and (4) mediabroadcast.php. Published: 2006-12-27T23:00:00.000Z Updated: 2024-08-07T20:42:06.495Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/21741 https://www.exploit-db.com/exploits/3003 http://secunia.com/advisories/23501 http://www.vupen.com/english/advisories/2006/5177	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.