TI-2012-05407 CVE-2012-6705 · GHSA-j6ff-237f-2q23
Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.
Priority LOW 29
Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.
Vulnerabilities
10 records
TI-2014-04170 CVE-2014-5098 · GHSA-36pj-pfw6-cc65
Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query string to search/results/.
TI-2013-05594 CVE-2013-6804 · GHSA-8wr2-c64c-66xv
Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the search_string parameter to search/results/all/1/4.
TI-2010-02366 CVE-2010-2463 · GHSA-c9gh-426m-j894
Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows…
Priority LOW 23
Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the post_id parameter in a modify action.
TI-2009-01253 CVE-2009-1318 · GHSA-55m7-fhr5-ph85
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6…
Priority LOW 33
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences i…
TI-2008-03237 CVE-2008-3376 · GHSA-f33p-646v-xcq5
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.
Priority MEDIUM 46
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.
TI-2008-03236 CVE-2008-3375 · GHSA-hx7f-9jfv-xvrf
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows…
Priority LOW 39
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie co…
TI-2008-02760 CVE-2008-2886 · GHSA-6h84-rvpp-p247
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in…
Priority MEDIUM 47
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the j…
TI-2008-02757 CVE-2008-2883 · GHSA-2q96-rrqq-jj73
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in…
Priority LOW 37
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroom[jm_dir] parameter.
TI-2006-04876 CVE-2006-5060 · GHSA-wmpr-rqrj-vhmc
Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly…
Priority LOW 28
Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode.