Vulnerabilities

TI-2008-04011 CVE-2008-4180 · GHSA-9r9h-5xq6-44jp

Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute…

LOW 25

Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute force attacks against passwords via a username in the g_dbuser parameter and a password in the g_dbpwd parameter, and possibly a "…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01213 Published 2008-09-23 No fix listed CWE-200

TI-2008-04010 CVE-2008-4179 · GHSA-f2cw-4jjq-5crf

Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) page_id parameter to smileys.php and the (2) q parameter to search.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01535 Published 2008-09-23 No fix listed CWE-79

TI-2008-03993 CVE-2008-4162 · GHSA-v43w-xvv9-h2cv

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to…

LOW 22

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the g_site_url parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0106 Published 2008-09-22 No fix listed CWE-59

Vulnerabilities

Filters

Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute…

Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers…

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to…