JA
Vendor
Jamroom
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2012-6705 | JA Jamroom Jamroom | 6.1 | Jun 4 | Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field |
| CVE-2014-5098 | SM Search Module Jamroom | – | Oct 20 | Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query string to… |
| CVE-2013-6804 | SM Search Module Jamroom | – | Dec 5 | Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the search_string… |
| CVE-2010-2463 | JA Jamroom Jamroom | – | Jun 25 | Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the post_id parameter in a modify… |
| CVE-2009-1318 | JA Jamroom Jamroom | – | Apr 17 | Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary… |
| CVE-2008-3376 | JA Jamroom Jamroom | – | Jul 30 | Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors |
| CVE-2008-3375 | JA Jamroom Jamroom | – | Jul 30 | The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value… |
| CVE-2008-2886 | JA Jamroom Jamroom | – | Jun 27 | PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_globals is enabled, allows remote attackers to… |
| CVE-2008-2883 | JA Jamroom Jamroom | – | Jun 26 | PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in… |
| CVE-2006-5060 | JA Jamroom Jamroom | – | Sep 28 | Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot… |