CVE-2008-3375 (GCVE-0-2008-3375)
Vulnerability from cvelistv5 – Published: 2008-07-30 17:00 – Updated: 2024-08-07 09:37
VLAI
EPSS
VEX
Summary
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/31249 | third-party-advisoryx_refsource_SECUNIA |
| http://www.gulftech.org/?node=research&article_id… | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.jamroom.net/phpBB2/viewtopic.php?t=24454 | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/494820/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.jamroom.net/index.php?m=td_tracker&o=v… | x_refsource_CONFIRM |
| http://securityreason.com/securityalert/4069 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/bid/30406 | vdb-entryx_refsource_BID |
Date Public
2008-07-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T09:37:26.729Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "31249",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31249"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.gulftech.org/?node=research\u0026article_id=00117-07282008"
},
{
"name": "jamroom-jamroommiscinc-auth-bypass(44048)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44048"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.jamroom.net/phpBB2/viewtopic.php?t=24454"
},
{
"name": "20080728 JamRoom \u003c= 3.3.8 Authentication Bypass",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/494820/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.jamroom.net/index.php?m=td_tracker\u0026o=view\u0026id=1178"
},
{
"name": "4069",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/4069"
},
{
"name": "30406",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/30406"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-07-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-11T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "31249",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31249"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.gulftech.org/?node=research\u0026article_id=00117-07282008"
},
{
"name": "jamroom-jamroommiscinc-auth-bypass(44048)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44048"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.jamroom.net/phpBB2/viewtopic.php?t=24454"
},
{
"name": "20080728 JamRoom \u003c= 3.3.8 Authentication Bypass",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/494820/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.jamroom.net/index.php?m=td_tracker\u0026o=view\u0026id=1178"
},
{
"name": "4069",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/4069"
},
{
"name": "30406",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/30406"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-3375",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "31249",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31249"
},
{
"name": "http://www.gulftech.org/?node=research\u0026article_id=00117-07282008",
"refsource": "MISC",
"url": "http://www.gulftech.org/?node=research\u0026article_id=00117-07282008"
},
{
"name": "jamroom-jamroommiscinc-auth-bypass(44048)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44048"
},
{
"name": "http://www.jamroom.net/phpBB2/viewtopic.php?t=24454",
"refsource": "CONFIRM",
"url": "http://www.jamroom.net/phpBB2/viewtopic.php?t=24454"
},
{
"name": "20080728 JamRoom \u003c= 3.3.8 Authentication Bypass",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/494820/100/0/threaded"
},
{
"name": "http://www.jamroom.net/index.php?m=td_tracker\u0026o=view\u0026id=1178",
"refsource": "CONFIRM",
"url": "http://www.jamroom.net/index.php?m=td_tracker\u0026o=view\u0026id=1178"
},
{
"name": "4069",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/4069"
},
{
"name": "30406",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/30406"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-3375",
"datePublished": "2008-07-30T17:00:00.000Z",
"dateReserved": "2008-07-30T00:00:00.000Z",
"dateUpdated": "2024-08-07T09:37:26.729Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2008-3375",
"date": "2026-09-22",
"epss": "0.03559",
"percentile": "0.88811"
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:*",
"matchCriteriaId": "45390A50-7145-4334-8719-0B32EDF8CC3A",
"versionEndIncluding": "3.3.8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2CD5550F-E364-4888-8A53-2A3DCE796A29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b1:*:*:*:*:*:*",
"matchCriteriaId": "61367DA9-F651-4FB3-8D48-1AF26066C15D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b2:*:*:*:*:*:*",
"matchCriteriaId": "66CD47A2-E6E0-4079-B872-F890520FDC26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b3:*:*:*:*:*:*",
"matchCriteriaId": "3DA0695A-4CA9-4FE0-B9D1-A48335F57BB6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b4:*:*:*:*:*:*",
"matchCriteriaId": "4ABCF337-4928-45B8-8F99-725B5F081AEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:1.0:b5:*:*:*:*:*:*",
"matchCriteriaId": "28AB3D7B-7AE2-44C5-A704-825B33BFBB41",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.0.9:a:*:*:*:*:*:*",
"matchCriteriaId": "38C2B402-A285-4959-B775-65B7A81AC242",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:*",
"matchCriteriaId": "AD305738-CAF6-4D26-9C20-2E30BCCB4ACD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:*",
"matchCriteriaId": "67567C47-1AC5-4916-99F2-B114E3B28087",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:*",
"matchCriteriaId": "FC892073-E68B-4BC7-B327-5A50423D5CB9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:*",
"matchCriteriaId": "BB2BAE01-7CA6-4883-A94B-F8DCA3664DE0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:rc2:*:*:*:*:*:*",
"matchCriteriaId": "922EBD12-2BDD-4DCB-95B4-859379699698",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.60:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E0E76FF6-D673-410D-83D6-F120CBC916B5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:*",
"matchCriteriaId": "D96BCD95-57BE-49E3-AA36-553615FB8CA4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:*",
"matchCriteriaId": "9F370EE5-826A-4180-83AD-13391DF8C1EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:*",
"matchCriteriaId": "DF74AC65-8D38-45F2-9D07-93414DDC3321",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:*",
"matchCriteriaId": "D4C09353-8A2D-4363-A44C-62EEDD6CD127",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:*",
"matchCriteriaId": "F08631D7-BD25-4EEB-A980-8BD959D65296",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:*",
"matchCriteriaId": "68B03674-5C17-4867-A4B7-3F81F9F25E1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:*",
"matchCriteriaId": "137287E7-5927-495F-9B9F-D04AC7E528E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:*",
"matchCriteriaId": "B55161FB-A8BC-412D-8AF7-DBB50D251AB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:*",
"matchCriteriaId": "04BAE9FF-377C-4DA8-BA15-6D54266B571A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "65E5D230-4B3F-40B4-BA76-CF6ED80C6A2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b1:*:*:*:*:*:*",
"matchCriteriaId": "5EE9AC6B-DEDA-4898-8D77-E1D0FE16A5A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b2:*:*:*:*:*:*",
"matchCriteriaId": "CA9222BC-4F3F-4ADA-BE29-C0E60D852B7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b3:*:*:*:*:*:*",
"matchCriteriaId": "E269400E-65C9-4993-A469-C1722C72A89A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b4:*:*:*:*:*:*",
"matchCriteriaId": "A96EE17A-987A-4FA6-872C-2998F22A3B98",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b5:*:*:*:*:*:*",
"matchCriteriaId": "718A7588-74E6-4601-B3B7-0C3EA0A0D021",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b6:*:*:*:*:*:*",
"matchCriteriaId": "6370A2F4-2D59-404F-87C6-FEDCACD4A64F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b7:*:*:*:*:*:*",
"matchCriteriaId": "E5FFE8CE-0001-4221-A19C-2CB45A6CDA53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0:b8:*:*:*:*:*:*",
"matchCriteriaId": "F9084E5E-29A9-4C1C-BBB4-0A05870908AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C6947161-212C-48D0-A21F-DC5EFED5274B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "473AEE4B-3F73-49EB-8E30-B1AEF11DD9D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "45F96B70-E44F-4392-9983-E395D27DDF82",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "12D8B1B7-2349-4E1F-B86F-C6CF5157F429",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "63A95CFA-5E47-4D8D-B5A7-38880FC9324B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "0E521F6F-D31C-4E08-AC06-120109DF4020",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "2B92F69F-85E9-4413-8474-24CF6186FB23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "9DCA7B3B-3BBE-40E7-A750-D4911A7380AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "1091207E-9F46-4F56-8D0F-C098BD2BBB81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:*",
"matchCriteriaId": "3AE17521-A44E-4920-B50F-84EBA942D08B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:*",
"matchCriteriaId": "21E46C8F-0B90-4583-A52E-933B7333F0D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:*",
"matchCriteriaId": "A911F967-8298-4C81-A6D3-0378595D41C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:*",
"matchCriteriaId": "213CE4E8-54D1-479D-8227-94035A982155",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:*",
"matchCriteriaId": "151F9FC7-0BAB-463F-BD3A-2F8582AD1C05",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:*",
"matchCriteriaId": "16CCF11C-2464-48E8-8049-4838092C6547",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*",
"matchCriteriaId": "FCB674DC-97AB-4D45-BAF1-71AE18FAB3CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:*",
"matchCriteriaId": "05D0AA62-0F61-490D-AFC6-E571F4646A3D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:*",
"matchCriteriaId": "E5D88374-B90E-4E85-BFA9-C874ABA08B06",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:*",
"matchCriteriaId": "25655EBC-1E87-415E-9D20-0179F4FCD35D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:*",
"matchCriteriaId": "2F208C24-E78B-49A0-8E61-90A1A7D475CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:*",
"matchCriteriaId": "8D49548E-EE58-4694-8099-032D3B65AA6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:*",
"matchCriteriaId": "00DE05D9-4DC3-4F76-9314-E7AE267DA4DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:*",
"matchCriteriaId": "7DC05C6F-2816-4486-8A2D-A40A523439F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:*",
"matchCriteriaId": "EF05E590-EDA4-4F52-A3D9-A7D070484A07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:*",
"matchCriteriaId": "F34F3181-7CC9-45D4-AC45-D6A61AC58627",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:*",
"matchCriteriaId": "690D31B5-B81E-4FA7-8031-84438703490D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:*",
"matchCriteriaId": "D93B8842-96E2-4153-9F12-5A3A1DFB7C7D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:*",
"matchCriteriaId": "4F1BB904-07E0-4C62-9365-C717D9FA18C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:*",
"matchCriteriaId": "1A2BFB5B-BC98-4604-A3E1-1B703D1C1577",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:*",
"matchCriteriaId": "DDC0BC1D-8BFD-4A57-A160-959CB93DE303",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DCA6F88A-C89F-4014-B1FD-BBBA8A68B5E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b1:*:*:*:*:*:*",
"matchCriteriaId": "44456A6C-AF1D-445F-BF71-5A80008F84FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b2:*:*:*:*:*:*",
"matchCriteriaId": "4EE15983-D025-47B0-87AB-B8E3818EA811",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.0:b3:*:*:*:*:*:*",
"matchCriteriaId": "6EDCB191-2EB5-41C0-A354-6D790CF16083",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0E394BD3-8B2A-4896-868E-C4927356B486",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "41C8D61B-A5D8-4075-B2C6-119CC06AA4D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9CC1F1D3-46B6-4AB2-9A5C-A13B89084031",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "111054E3-3BD4-4E97-980B-1E1DC539182F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "32EC8F1C-4014-4DF2-AB32-6D82327FE793",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "BA8FDF4F-1F22-4E2B-A5F6-F69F6FC62FCE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5C655733-74A4-4E0F-84EF-FE294F6753BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C86D6AC4-4641-4874-A8D2-26E486EE6B1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "1DCE23FB-700D-4E00-9B46-7AFD31D9358B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "A6366FFF-8412-465C-AA08-7C9366785059",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "1978E341-AF7E-49B8-8ADC-879F2B11D8E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "CC99103B-A43D-4370-A70B-D9DD2C665056",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8D1F953D-8D25-4395-8A86-4E2DD5B2399F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FA61EDF9-CF08-407E-861E-98BF3B752834",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A406E79C-13CF-48A3-943E-0AACC8050411",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "B97B0CB1-E4D7-4210-933B-AD114EFF0D53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "FE551F7B-0F0F-480D-BDD5-0E51ACB595ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "C10A858B-6771-4E23-9E93-CCA37F21089E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "93DD0B7C-609B-4E41-A44C-1F3B607EBC70",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "AF7DC010-399B-4DC7-82BC-BC2CAF19AD3A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie."
},
{
"lang": "es",
"value": "La funci\u00f3n jrCookie en includes/jamroom-misc.inc.php en JamRoom anterior a 3.4.0, permite a atacantes remotos evitar la autenticaci\u00f3n y obtener privilegios de administrador a trav\u00e9s de un valor booleano en un dato en serie dentro de una cookie JMU_Cookie."
}
],
"id": "CVE-2008-3375",
"lastModified": "2026-04-23T00:35:47.467",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2008-07-30T17:41:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/31249"
},
{
"source": "cve@mitre.org",
"url": "http://securityreason.com/securityalert/4069"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit"
],
"url": "http://www.gulftech.org/?node=research\u0026article_id=00117-07282008"
},
{
"source": "cve@mitre.org",
"url": "http://www.jamroom.net/index.php?m=td_tracker\u0026o=view\u0026id=1178"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://www.jamroom.net/phpBB2/viewtopic.php?t=24454"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/494820/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit"
],
"url": "http://www.securityfocus.com/bid/30406"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44048"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/31249"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securityreason.com/securityalert/4069"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
],
"url": "http://www.gulftech.org/?node=research\u0026article_id=00117-07282008"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.jamroom.net/index.php?m=td_tracker\u0026o=view\u0026id=1178"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://www.jamroom.net/phpBB2/viewtopic.php?t=24454"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/494820/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
],
"url": "http://www.securityfocus.com/bid/30406"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44048"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-287"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…