Vulnerabilities

TI-2008-03917 CVE-2008-4083 · GHSA-qhp3-v47q-gmcc

Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows…

LOW 20

Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01335 Published 2008-09-15 No fix listed CWE-79

TI-2008-03916 CVE-2008-4082 · GHSA-mrvr-p347-36x4

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is…

LOW 23

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php…

CVSS 2.0MEDIUM 4.6 Network Low privileges Interaction — EPSS 0.00839 Published 2008-09-15 No fix listed CWE-89

TI-2008-02535 CVE-2008-2645 · GHSA-gcfx-wr8q-hc44

Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow…

MEDIUM 60

Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in (1) barrel/, (2) barry/, (…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.3903 Published 2008-06-10 No fix listed CWE-94

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows…

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is…

Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow…