Unrated severityNVD Advisory· Published Jun 26, 2008· Updated Apr 23, 2026
CVE-2008-2883
CVE-2008-2883
Description
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroom[jm_dir] parameter. NOTE: some of these details are obtained from third party information.
Affected products
6cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.jamroom.net/index.phpnvdExploit
- secunia.com/advisories/30806nvdVendor Advisory
- www.jamroom.netnvd
- www.exploit-db.com/exploits/5876nvd
News mentions
0No linked articles in our index yet.