CVE-2008-2883

PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2883

The CVE-2008-2883 issue affects Jamroom versions 3.3.0 through 3.3.5, where a PHP remote file inclusion (RFI) flaw exists in include/plugins/jrBrowser/payment.php. The vulnerability is triggered by supplying a URL in the jamroom[jm_dir] parameter, permitting remote attackers to execute arbitrary ...

CVE-2008-2883: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter. NOTE: some of these details are obtained from third party information...

jamroom-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : CMS Jamroom Version: 3.3.5 Discovered By : Cyberlog Scripts site : http://www.jamroom.net/ Download Script : http://www.jamroom.net/index.php?m=tddownload&o=download&fileid=43 Thanks To :...

Jamroom 3.3.5 Remote File Inclusion Vulnerabilities

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : CMS Jamroom Version: 3.3.5 Discovered By : Cyberlog Scripts site : http://www.jamroom.net/ Download Script :...

Jamroom 3.3.5 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =================================================== Jamroom 3.3.5 Remote File Inclusion Vulnerabilities ===================================================...

Jamroom 3.3.5 - Remote File Inclusion

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : CMS Jamroom Version: 3.3.5 Discovered By : Cyberlog Scripts site : http://www.jamroom.net/ Download Script : http://www.jamroom.net/index.php?m=tddownload&o=download&fileid=43 Thanks To :...

Jamroom 3.3.5 - Remote File Inclusion

Jamroom 3.3.5 - Remote File Inclusion +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : CMS Jamroom Version: 3.3.5 Discovered By : Cyberlog Scripts site : http://www.jamroom.net/ Download Script :...

jamroom Remote File Include

jamroom-3.0.19 Class: Remote|Local File Include Vulnerability Remote: Yes Local: No Type: High $it :http://www.jamroom.net/Downloads3Core Author: xw0x Contact: [email protected] Ramadan Karim All Musulman Vuln Code =================jamroom-schema.inc.php================...

New Vunerability

and now , 00 TNX str0k jamroom-3.0.19 Class: Remote|Local File Include Vulnerability Remote: Yes Local: No Type: High $it :http://www.jamroom.net/Downloads3Core Author: xw0x Contact: [email protected] Ramadan Bayarma All Musulman Vuln Code =================libchart.php================ requireonce...

CVE-2006-5060

Cross-site scripting XSS vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode...

CVE-2006-5060

Cross-site scripting XSS vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode...

CVE-2006-5060: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode...

CVE-2006-5060

The CVE-2006-5060 entry concerns a cross-site scripting (XSS) vulnerability in Jamroom 3.0.16 (and possibly earlier) within login.php, exploitable via the forgot parameter in the forgot mode. The NVD details a CVSSv2 base score of 5.1 (Medium) with network attack vector, high complexity, no authe...

Jamroom 3.0.16 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20162/info Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context ...

Jamroom 3.0.16 - login.php Cross-Site Scripting

Jamroom 3.0.16 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20162/info Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...