jamroom kayıtları
jamroom üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2008-3376İstismar yok | Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.jamroom · jamroom · CWE-264 | Kritik10,0 | — | %1,5 | 30 Tem 2008 |
38İzleyin | CVE-2008-2886Kavram kanıtı | PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_globals is ejamroom · jamroom · CWE-94 | Kritik9,3 | — | %3,8 | 27 Haz 2008 |
31İzleyin | CVE-2008-3375Kavram kanıtı | The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain admjamroom · jamroom · CWE-287 | Yüksek7,5 | — | %3,6 | 30 Tem 2008 |
31İzleyin | CVE-2008-2883Kavram kanıtı | PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to ejamroom · jamroom · CWE-94 | Yüksek7,5 | — | %2,3 | 26 Haz 2008 |
27İzleyin | CVE-2009-1318Kavram kanıtı | Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allowsjamroom · jamroom · CWE-22 | Orta6,5 | — | %2,0 | 17 Nis 2009 |
24İzleyin | CVE-2012-6705İstismar yok | Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.jamroom · jamroom · CWE-79 | Orta6,1 | — | %0,8 | 4 Haz 2017 |
21İzleyin | CVE-2006-5060Kavram kanıtı | Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary webjamroom · jamroom | Orta5,1 | — | %2,2 | 27 Eyl 2006 |
18İzleyin | CVE-2014-5098İstismar yok | Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web scriptjamroom · search module · CWE-79 | Orta4,3 | — | %1,9 | 20 Eki 2014 |
17İzleyin | CVE-2010-2463Kavram kanıtı | Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTMLjamroom · jamroom · CWE-79 | Orta4,3 | — | %1,5 | 25 Haz 2010 |
17İzleyin | CVE-2013-6804İstismar yok | Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web scripjamroom · search module · CWE-79 | Orta4,3 | — | %1,2 | 5 Ara 2013 |
- CVE-2008-337640Planlayın
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.
KritikCVSS 10,0İstismar yokEPSS %1jamroom · jamroom30 Tem 2008
- CVE-2008-288638İzleyin
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_globals is e
KritikCVSS 9,3Kavram kanıtıEPSS %4jamroom · jamroom27 Haz 2008
- CVE-2008-337531İzleyin
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain adm
YüksekCVSS 7,5Kavram kanıtıEPSS %4jamroom · jamroom30 Tem 2008
- CVE-2008-288331İzleyin
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to e
YüksekCVSS 7,5Kavram kanıtıEPSS %2jamroom · jamroom26 Haz 2008
- CVE-2009-131827İzleyin
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows
OrtaCVSS 6,5Kavram kanıtıEPSS %2jamroom · jamroom17 Nis 2009
- CVE-2012-670524İzleyin
Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.
OrtaCVSS 6,1İstismar yokEPSS %1jamroom · jamroom4 Haz 2017
- CVE-2006-506021İzleyin
Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web
OrtaCVSS 5,1Kavram kanıtıEPSS %2jamroom · jamroom27 Eyl 2006
- CVE-2014-509818İzleyin
Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script
OrtaCVSS 4,3İstismar yokEPSS %2jamroom · search module20 Eki 2014
- CVE-2010-246317İzleyin
Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3Kavram kanıtıEPSS %1jamroom · jamroom25 Haz 2010
- CVE-2013-680417İzleyin
Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web scrip
OrtaCVSS 4,3İstismar yokEPSS %1jamroom · search module5 Ara 2013