CVE-2012-6705

Description

References

• st2tea.blogspot.com/2012/02/jamroom-cross-site-scripting.html · Exploit
• securityfocus.com/bid/52073 · Third Party Advisory

jamroom의 다른 취약점

• CVE-2010-2463보통 4.3Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2009-1318보통 6.5Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows…
• CVE-2008-3376심각 10.0Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.
• CVE-2008-3375높음 7.5The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain adm…
• CVE-2008-2886심각 9.3PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_globals is e…