CVE:CVE-2008-2883
CNNVD:CNNVD-200806-382
Jamroom 3.3.0 至 3.3.5的include/plugins/jrBrowser/payment.php中存在PHP远程文件包含漏洞，远程攻击者通过 jamroom[jm_dir]参数中的一个URL来执行任意PHP代码。
solution:Upgrade jamroom jamroom to a higher version than 3.3.0,3.3.1,3.3.2,3.3.3,3.3.4,3.3.5,and avoid the version 3.3.0,3.3.1,3.3.2,3.3.3,3.3.4,3.3.5