Unrated severityNVD Advisory· Published Jun 26, 2008· Updated Jun 16, 2026
CVE-2008-2883
CVE-2008-2883
Description
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroom[jm_dir] parameter. NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*
- (no CPE)range: 3.3.0 - 3.3.5
Patches
Vulnerability mechanics
References
4- www.jamroom.net/index.phpnvdExploit
- secunia.com/advisories/30806nvdVendor Advisory
- www.jamroom.netnvd
- www.exploit-db.com/exploits/5876nvd
News mentions
0No linked articles in our index yet.