Multiple input validation errors exist in Junkie version 0.3.1 that allow for command execution and directory traversal attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35425/junkie.txt
Source: https://packetstormsecurity.com/files/35425/junkie.txt.html