Published: 30/07/2008 Updated: 11/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom prior to 3.4.0 allows remote malicious users to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jamroom jamroom 1.0
jamroom jamroom 2.60
jamroom jamroom 2.61
jamroom jamroom 2.69
jamroom jamroom 3.0
jamroom jamroom 3.0.15
jamroom jamroom 3.0.16
jamroom jamroom 3.0.22
jamroom jamroom 3.0.23
jamroom jamroom 3.0.30
jamroom jamroom 2.6.11
jamroom jamroom 2.6.12
jamroom jamroom 2.64
jamroom jamroom 2.65
jamroom jamroom 3.0.11
jamroom jamroom 3.0.12
jamroom jamroom 3.0.19
jamroom jamroom 3.0.2
jamroom jamroom 3.0.26
jamroom jamroom 3.0.27
jamroom jamroom 3.0.28
jamroom jamroom 3.0.7
jamroom jamroom 3.0.8
jamroom jamroom 3.1.3
jamroom jamroom 3.1.4
jamroom jamroom 3.2.5
jamroom jamroom 3.2.6
jamroom jamroom 3.3.6
jamroom jamroom 3.3.7
jamroom jamroom 3.0.4
jamroom jamroom 3.1.0
jamroom jamroom 3.2.1
jamroom jamroom 3.2.2
jamroom jamroom 3.3.2
jamroom jamroom 3.3.3
jamroom jamroom 2.0.9
jamroom jamroom 2.6.10
jamroom jamroom 2.62
jamroom jamroom 2.63
jamroom jamroom 3.0.1
jamroom jamroom 3.0.10
jamroom jamroom 3.0.17
jamroom jamroom 3.0.18
jamroom jamroom 3.0.24
jamroom jamroom 3.0.25
jamroom jamroom 3.0.5
jamroom jamroom 3.0.6
jamroom jamroom 3.1.1
jamroom jamroom 3.1.2
jamroom jamroom 3.2.3
jamroom jamroom 3.2.4
jamroom jamroom 3.3.4
jamroom jamroom 3.3.5
jamroom jamroom 2.66
jamroom jamroom 2.67
jamroom jamroom 2.68
jamroom jamroom 3.0.13
jamroom jamroom 3.0.14
jamroom jamroom 3.0.20
jamroom jamroom 3.0.21
jamroom jamroom 3.0.29
jamroom jamroom 3.0.3
jamroom jamroom 3.0.9
jamroom jamroom 3.1.5
jamroom jamroom 3.2.0
jamroom jamroom 3.3.0
jamroom jamroom 3.3.1
jamroom jamroom

source: wwwsecurityfocuscom/bid/30406/info Jamroom is prone to fourteen security vulnerabilities, including an authentication-bypass vulnerability that occurs because the application fails to verify user-supplied data Very few technical details are available regarding the remaining security vulnerabilities We will update this BID when ...

CWE-287 http://www.gulftech.org/?node=research&article_id=00117-07282008 http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1178 http://www.jamroom.net/phpBB2/viewtopic.php?t=24454 http://www.securityfocus.com/bid/30406 http://secunia.com/advisories/31249 http://securityreason.com/securityalert/4069 https://exchange.xforce.ibmcloud.com/vulnerabilities/44048 http://www.securityfocus.com/archive/1/494820/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/32121/

CVE-2008-3375

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect