CVE:CVE-2009-2313
CNNVD:CNNVD-200907-051
Jinzora Media Jukebox 2.8以及更早版本下的index.php存在目录遍历漏洞，允许远程攻击者借助名字参数中的".."放入和运行任意的本地文件。
solution:Upgrade jinzora jinzora to a higher version than 2.8,0.1.1,0.2,0.3,0.3:pre,0.3:pre_2,0.3.1,0.4,0.5,0.6.2,0.7,0.8.1,0.8.2,0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,1.0.1,1.1,2.0,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.1,2.2,2.3,2.3.1,2.3.2,2.3.3,2.3.4,2.3.5,2.3.6,2.3.7,2.5,2.5.1,2.6,2.6.1,2.7,2.7.5,and avoid the version (,2.8],0.1.1,0.2,0.3,0.3:pre,0.3:pre_2,0.3.1,0.4,0.5,0.6.2,0.7,0.8.1,0.8.2,0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,1.0.1,1.1,2.0,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.1,2.2,2.3,2.3.1,2.3.2,2.3.3,2.3.4,2.3.5,2.3.6,2.3.7,2.5,2.5.1,2.6,2.6.1,2.7,2.7.5