The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-07-30T17:00:00

Updated: 2024-08-07T09:37:26.729Z

Reserved: 2008-07-30T00:00:00

Link: CVE-2008-3375

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-07-30T17:41:00.000

Modified: 2018-10-11T20:48:09.740

Link: CVE-2008-3375

cve-icon Redhat

No data.