Nwom

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nwom records in CISA KEV

No Nwom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nwom Topsites 2 records LOW

Records

2 records

TI-2007-00240 CVE-2007-0249 · GHSA-2ff8-2ppq-mp65

Cross-site scripting (XSS) vulnerability in index.php in Nwom topsites 3.0 allows remote…

LOW 33

Cross-site scripting (XSS) vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary web script or HTML via the o parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01398 Published 2007-01-16 No fix listed

TI-2007-00241 CVE-2007-0250 · GHSA-9hqm-hvcf-72f9

index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive…

LOW 26

index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' (quote) character in the o parameter, which forces a SQL error.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01324 Published 2007-01-16 No fix listed

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0