Browse CVEs

MEDIUM 6.1 CVE-2012-6705 Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field. Jamroom after 4.2.6 Fix from $1,6002017-06-04 MEDIUM 6.5 CVE-2009-1318 Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote a… Jamroom No fix yet Fix from $1,6002009-04-17 HIGH 10.0 CVE-2008-3376 Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors. Jamroom after 3.3.8 Fix from $1,9502008-07-30 HIGH 7.5 CVE-2008-3375 The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrati… Jamroom after 3.3.8 Fix from $1,9502008-07-30 HIGH 9.3 CVE-2008-2886 PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_globals is enabled, a… Jamroom Patch available Fix from $1,9502008-06-27 HIGH 7.5 CVE-2008-2883 PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute ar… Jamroom No fix yet Fix from $1,9502008-06-26 MEDIUM 5.1 CVE-2006-5060 Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script o… Jamroom No fix yet Fix from $1,6002006-09-28