CVE-2008-2883

PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2883

The CVE-2008-2883 issue affects Jamroom versions 3.3.0 through 3.3.5, where a PHP remote file inclusion (RFI) flaw exists in include/plugins/jrBrowser/payment.php. The vulnerability is triggered by supplying a URL in the jamroom[jm_dir] parameter, permitting remote attackers to execute arbitrary ...

Jamroom 3.3.5 - Remote File Inclusion

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : CMS Jamroom Version: 3.3.5 Discovered By : Cyberlog Scripts site : http://www.jamroom.net/ Download Script : http://www.jamroom.net/index.php?m=tddownload&o=download&fileid=43 Thanks To :...