CVE-2008-3375: Jamroom

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie.

Affected products

• Jamroom Jamroom: up to and including 3.3.8; version 1.0 only; version 2.0.9 only; version 2.6.10 only; version 2.6.11 only; version 2.6.12 only; …

Published 2008-07-30. Last modified 2026-06-16.