CVE

Id
33003  
CVE No.
CVE-2008-2886  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the jamroom[jm_dir] parameter.  
Phase
Assigned (20080627)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
358273 33003 CVE-2008-2886 MILW0RM:5876  View
358274 33003 CVE-2008-2886 URL:http://www.milw0rm.com/exploits/5876  View
358275 33003 CVE-2008-2886 CONFIRM:http://www.jamroom.net/  View
358276 33003 CVE-2008-2886 CONFIRM:http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1130  View
358277 33003 CVE-2008-2886 BID:29854  View
358278 33003 CVE-2008-2886 URL:http://www.securityfocus.com/bid/29854  View
358279 33003 CVE-2008-2886 SECUNIA:30806  View
358280 33003 CVE-2008-2886 URL:http://secunia.com/advisories/30806  View
358281 33003 CVE-2008-2886 SREASON:3961  View
358282 33003 CVE-2008-2886 URL:http://securityreason.com/securityalert/3961  View
358283 33003 CVE-2008-2886 XF:jamroom-purchase-file-include(43299)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49276 JVNDB-2008-004586 OFFL における SQL インジェクションの脆弱性 Online Fantasy Football League (OFFL) には、SQL インジェクションの脆弱性が存在します。 CVE-2008-2890 33003 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004586.html  View