Brim-project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Brim-project records in CISA KEV

No Brim-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Brim 3 records MEDIUM

Records

3 records

TI-2008-02535 CVE-2008-2645 · GHSA-gcfx-wr8q-hc44

Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow…

MEDIUM 60

Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in (1) barrel/, (2) barry/, (…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.3903 Published 2008-06-10 No fix listed CWE-94

TI-2008-03916 CVE-2008-4082 · GHSA-mrvr-p347-36x4

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is…

LOW 23

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php…

CVSS 2.0MEDIUM 4.6 Network Low privileges Interaction — EPSS 0.00839 Published 2008-09-15 No fix listed CWE-89

TI-2008-03917 CVE-2008-4083 · GHSA-qhp3-v47q-gmcc

Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows…

LOW 20

Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01335 Published 2008-09-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	1
No CVSS	0