CyberSec.Space Logo
Back to CVE Browser

CVE-2008-3375

HIGH
7.5
CVSS Severity Score
EPSS Score0.0930%
EPSS Percentile30.22th
PublishedJul 30, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie.

Affected Platforms (CPE)

📦
Jamroom

Jamroom

<= 3.3.8
📦
Jamroom

Jamroom

= 1.0
📦
Jamroom

Jamroom

= 1.0
📦
Jamroom

Jamroom

= 1.0
📦
Jamroom

Jamroom

= 1.0
📦
Jamroom

Jamroom

= 1.0
📦
Jamroom

Jamroom

= 1.0
📦
Jamroom

Jamroom

= 2.0.9
📦
Jamroom

Jamroom

= 2.6.10
📦
Jamroom

Jamroom

= 2.6.11
📦
Jamroom

Jamroom

= 2.6.12
📦
Jamroom

Jamroom

= 2.60
📦
Jamroom

Jamroom

= 2.60
📦
Jamroom

Jamroom

= 2.60
📦
Jamroom

Jamroom

= 2.61
📦
Jamroom

Jamroom

= 2.62
📦
Jamroom

Jamroom

= 2.63
📦
Jamroom

Jamroom

= 2.64
📦
Jamroom

Jamroom

= 2.65
📦
Jamroom

Jamroom

= 2.66
📦
Jamroom

Jamroom

= 2.67
📦
Jamroom

Jamroom

= 2.68
📦
Jamroom

Jamroom

= 2.69
📦
Jamroom

Jamroom

= 3.0
📦
Jamroom

Jamroom

= 3.0
📦
Jamroom

Jamroom

= 3.0
📦
Jamroom

Jamroom

= 3.0
📦
Jamroom

Jamroom

= 3.0
📦
Jamroom

Jamroom

= 3.0
📦
Jamroom

Jamroom

= 3.0
📦
Jamroom

Jamroom

= 3.0
📦
Jamroom

Jamroom

= 3.0
📦
Jamroom

Jamroom

= 3.0.1
📦
Jamroom

Jamroom

= 3.0.2
📦
Jamroom

Jamroom

= 3.0.3
📦
Jamroom

Jamroom

= 3.0.4
📦
Jamroom

Jamroom

= 3.0.5
📦
Jamroom

Jamroom

= 3.0.6
📦
Jamroom

Jamroom

= 3.0.7
📦
Jamroom

Jamroom

= 3.0.8
📦
Jamroom

Jamroom

= 3.0.9
📦
Jamroom

Jamroom

= 3.0.10
📦
Jamroom

Jamroom

= 3.0.11
📦
Jamroom

Jamroom

= 3.0.12
📦
Jamroom

Jamroom

= 3.0.13
📦
Jamroom

Jamroom

= 3.0.14
📦
Jamroom

Jamroom

= 3.0.15
📦
Jamroom

Jamroom

= 3.0.16
📦
Jamroom

Jamroom

= 3.0.17
📦
Jamroom

Jamroom

= 3.0.18
📦
Jamroom

Jamroom

= 3.0.19
📦
Jamroom

Jamroom

= 3.0.20
📦
Jamroom

Jamroom

= 3.0.21
📦
Jamroom

Jamroom

= 3.0.22
📦
Jamroom

Jamroom

= 3.0.23
📦
Jamroom

Jamroom

= 3.0.24
📦
Jamroom

Jamroom

= 3.0.25
📦
Jamroom

Jamroom

= 3.0.26
📦
Jamroom

Jamroom

= 3.0.27
📦
Jamroom

Jamroom

= 3.0.28
📦
Jamroom

Jamroom

= 3.0.29
📦
Jamroom

Jamroom

= 3.0.30
📦
Jamroom

Jamroom

= 3.1.0
📦
Jamroom

Jamroom

= 3.1.0
📦
Jamroom

Jamroom

= 3.1.0
📦
Jamroom

Jamroom

= 3.1.0
📦
Jamroom

Jamroom

= 3.1.1
📦
Jamroom

Jamroom

= 3.1.2
📦
Jamroom

Jamroom

= 3.1.3
📦
Jamroom

Jamroom

= 3.1.4
📦
Jamroom

Jamroom

= 3.1.5
📦
Jamroom

Jamroom

= 3.2.0
📦
Jamroom

Jamroom

= 3.2.1
📦
Jamroom

Jamroom

= 3.2.2
📦
Jamroom

Jamroom

= 3.2.3
📦
Jamroom

Jamroom

= 3.2.4
📦
Jamroom

Jamroom

= 3.2.5
📦
Jamroom

Jamroom

= 3.2.6
📦
Jamroom

Jamroom

= 3.3.0
📦
Jamroom

Jamroom

= 3.3.1
📦
Jamroom

Jamroom

= 3.3.2
📦
Jamroom

Jamroom

= 3.3.3
📦
Jamroom

Jamroom

= 3.3.4
📦
Jamroom

Jamroom

= 3.3.5
📦
Jamroom

Jamroom

= 3.3.6
📦
Jamroom

Jamroom

= 3.3.7

References & Advisories

🔗 http://secunia.com/advisories/31249
🔗 http://securityreason.com/securityalert/4069
🔗 http://www.gulftech.org/?node=research&article_id=00117-07282008
🔗 http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1178
🔗 http://www.jamroom.net/phpBB2/viewtopic.php?t=24454
🔗 http://www.securityfocus.com/archive/1/494820/100/0/threaded
🔗 http://www.securityfocus.com/bid/30406
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/44048

Related Vulnerabilities

CVE-2008-337610.0

Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.

CVE-2008-28869.3

PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_gl...

CVE-2008-28837.5

PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote atta...

CVE-2009-13186.5

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3....

CVE-2008-3375 Detail & Impact Analysis | CVSS 7.5 (HIGH) | Cyber-Sec.Space | Cyber-Sec.Space