CVE-2010-2463

Cross-site scripting XSS vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the postid parameter in a modify action...

Jamroom 4.0.2/4.1.x - 'forum.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41071/info Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Jamroom 4.0.24.1.x - forum.php Cross-Site Scripting

Jamroom 4.0.24.1.x - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41071/info Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Cross-site Scripting (XSS) Vulnerability in Jamroom

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Jamroom which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Jamroom: CVE-2010-2463 The vulnerability exists due to input sanitation error in the "postid" parameter i...

CVE-2009-1318

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter...

Directory traversal

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter...

CVE-2009-1318

CVE-2009-1318 describes a directory traversal flaw in Jamroom’s index.php that allows remote attackers to include arbitrary files via the t parameter. Affected versions include Jamroom 3.1.2, 3.2.3–3.2.6, 4.0.2, and possibly versions before 3.4.0. The underlying issue is untrusted input in the t ...

CVE-2009-1318

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter...

Jamroom 4.0.2 - t Local File Inclusion

Jamroom 4.0.2 - t Local File Inclusion o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamro...

Jamroom (index.php t) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== Jamroom index.php t Local File Inclusion Vulnerability ========================================================...

Jamroom 4.0.2 - 't' Local File Inclusion

o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamroom version 3.1.2 , 3.2.3 , 3.2.4 , 3.2....

Jamroom Local File Inclusion

o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamroom version 3.1.2 , 3.2.3 , 3.2.4 , 3.2....

Jamroom (index.php t) Local File Inclusion Vulnerability

No description provided by source. o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamroom...

Code injection

Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors...

Authentication flaw

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...

CVE-2008-3375

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...

CVE-2008-3376

Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors...

EUVD-2008-3362

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...

CVE-2008-3375

The vulnerability CVE-2008-3375 affects JamRoom prior to version 3.4.0. The jrCookie function in includes/jamroom-misc.inc.php allows remote attackers to bypass authentication and gain administrative access by manipulating a boolean value within serialized data in a JMU_Cookie cookie. This result...

CVE-2008-3375

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...