96 matches found
CVE-2010-2463
Cross-site scripting XSS vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the postid parameter in a modify action...
Cross site scripting
Cross-site scripting XSS vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the postid parameter in a modify action...
CVE-2010-2463
CVE-2010-2463 affects Jamroom before 4.1.9. The XSS vulnerability occurs in forum.php’s modify action via the post_id parameter due to input sanitization flaws, allowing remote attackers to inject arbitrary HTML/JavaScript into users’ browsers. An exploit example is provided by HTBridge (and rela...
CVE-2010-2463
Cross-site scripting XSS vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the postid parameter in a modify action...
CVE-2010-2463: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the postid parameter in a modify action...
Jamroom 4.0.2/4.1.x - 'forum.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/41071/info Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...
Jamroom 4.0.24.1.x - forum.php Cross-Site Scripting
Jamroom 4.0.24.1.x - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41071/info Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
Cross-site Scripting (XSS) Vulnerability in Jamroom
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Jamroom which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Jamroom: CVE-2010-2463 The vulnerability exists due to input sanitation error in the "postid" parameter i...
CVE-2009-1318
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter...
Directory traversal
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter...
CVE-2009-1318
CVE-2009-1318 describes a directory traversal flaw in Jamroom’s index.php that allows remote attackers to include arbitrary files via the t parameter. Affected versions include Jamroom 3.1.2, 3.2.3–3.2.6, 4.0.2, and possibly versions before 3.4.0. The underlying issue is untrusted input in the t ...
CVE-2009-1318
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter...
CVE-2009-1318: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter...
Jamroom 4.0.2 - t Local File Inclusion
Jamroom 4.0.2 - t Local File Inclusion o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamro...
Jamroom (index.php t) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================== Jamroom index.php t Local File Inclusion Vulnerability ========================================================...
Jamroom 4.0.2 - 't' Local File Inclusion
o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamroom version 3.1.2 , 3.2.3 , 3.2.4 , 3.2....
Jamroom Local File Inclusion
o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamroom version 3.1.2 , 3.2.3 , 3.2.4 , 3.2....
Jamroom (index.php t) Local File Inclusion Vulnerability
No description provided by source. o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamroom...
Code injection
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors...
Authentication flaw
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...