96 matches found
CVE-2008-3375
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...
CVE-2008-3376
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors...
EUVD-2008-3362
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...
CVE-2008-3375
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...
CVE-2008-3375
The vulnerability CVE-2008-3375 affects JamRoom prior to version 3.4.0. The jrCookie function in includes/jamroom-misc.inc.php allows remote attackers to bypass authentication and gain administrative access by manipulating a boolean value within serialized data in a JMU_Cookie cookie. This result...
CVE-2008-3376
CVE-2008-3376 concerns JamRoom prior to 3.4.0 with multiple unspecified vulnerabilities described as having unknown impact and attack vectors. The connected documents do not provide concrete technical details such as affected components, root cause, specific versions beyond “before 3.4.0,” or exp...
CVE-2008-3376
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors...
CVE-2008-3375: Improper Authentication
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...
CVE-2008-3376: Undefined Security Weakness
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors...
JamRoom <= 3.3.8 Authentication Bypass
GulfTech Security Research July 28, 2008 Vendor : Talldude Networks, LLC URL : http://www.jamroom.net/ Version : Jamroom = 3.3.8 Risk : Authentication Bypass Description: Jamroom is a popular online social media cms used to host artist sites and create music communities. It is vulnerable to a fla...
talldude-bypass.txt
GulfTech Security Research July 28, 2008 Vendor : Talldude Networks, LLC URL : http://www.jamroom.net/ Version : Jamroom = 3.3.8 Risk : Authentication Bypass Description: Jamroom is a popular online social media cms used to host artist sites and create music communities. It is vulnerable to a fla...
Jamroom 3.3.8 - Cookie Authentication Bypass
Jamroom 3.3.8 - Cookie Authentication Bypass source: https://www.securityfocus.com/bid/30406/info Jamroom is prone to fourteen security vulnerabilities, including an authentication-bypass vulnerability that occurs because the application fails to verify user-supplied data. Very few technical...
Jamroom 3.3.8 - Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/30406/info Jamroom is prone to fourteen security vulnerabilities, including an authentication-bypass vulnerability that occurs because the application fails to verify user-supplied data. Very few technical details are available regarding the remaining...
Remote file inclusion
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter...
CVE-2008-2886
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter...
CVE-2008-2886
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter...
CVE-2008-2886
CVE-2008-2886 : The JAMroom platform versions 3.3.0 through 3.3.5 are affected by a PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php. The issue occurs when register_globals is enabled and allows an attacker to trigger remote PHP code execution via the jamroom[jm_d...
CVE-2008-2886: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-2883
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter. NOTE: some of these details are obtained from third party information...