CVE-2008-3375

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...

Authentication flaw

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...

EUVD-2008-3362

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMUCookie cookie...

Input validation

PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input string beginning with S:, which does not properly track the number of input bytes being processed...

CVE-2007-1649

CVE-2007-1649 affects PHP 5.2.1, where context-dependent attackers can read portions of heap memory by executing certain scripts with a serialized data input string starting with S:, due to improper tracking of input bytes. This VUL is documented across multiple sources (SUSE, Red Hat, Mandriva a...