CVE Feed

    Dashboard / CVE / CVE-2008-3375

    CVE-2008-3375

    The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie.

    Published:Jul 30, 2008
    Last Modified:Apr 23, 2026
    EPS:Jul 30, 2008
    EPSS Score:0.12497
    CVSS Score:7.5

    Affected Products

    Vendor
    Jamroom
    Product
    Jamroom

    Exploits

    http://www.gulftech.org/?node=research&article_id=00117-07282008http://www.securityfocus.com/bid/30406http://www.gulftech.org/?node=research&article_id=00117-07282008http://www.securityfocus.com/bid/30406https://www.exploit-db.com/exploits/32121

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2012-6705 (CVSS 6.1) — Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.…
    CVE-2010-2463 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to injec…
    CVE-2009-1318 (CVSS 6.5) — Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly othe…
    CVE-2008-3376 (CVSS 10) — Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.…
    CVE-2008-2886 (CVSS 9.3) — PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3…
    CVE-2008-2883 (CVSS 7.5) — PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.…
    CVE-2006-5060 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote att…

    References

    http://secunia.com/advisories/31249
    http://securityreason.com/securityalert/4069
    http://www.gulftech.org/?node=research&article_id=00117-07282008
    http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1178
    http://www.jamroom.net/phpBB2/viewtopic.php?t=24454
    http://www.securityfocus.com/archive/1/494820/100/0/threaded
    http://www.securityfocus.com/bid/30406
    https://exchange.xforce.ibmcloud.com/vulnerabilities/44048
    http://secunia.com/advisories/31249
    http://securityreason.com/securityalert/4069
    http://www.gulftech.org/?node=research&article_id=00117-07282008
    http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1178
    http://www.jamroom.net/phpBB2/viewtopic.php?t=24454
    http://www.securityfocus.com/archive/1/494820/100/0/threaded
    http://www.securityfocus.com/bid/30406
    https://exchange.xforce.ibmcloud.com/vulnerabilities/44048

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High