CVE

Id
34297  
CVE No.
CVE-2008-4180  
Status
Candidate  
Description
Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute force attacks against passwords via a username in the g_dbuser parameter and a password in the g_dbpwd parameter, and possibly a "localhost" g_dbhost parameter value, related to a "Mysql Remote Brute Force Vulnerability."  
Phase
Assigned (20080923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
375548 34297 CVE-2008-4180 BUGTRAQ:20080911 Nooms 1.1  View
375549 34297 CVE-2008-4180 URL:http://www.securityfocus.com/archive/1/archive/1/496236/100/0/threaded  View
375550 34297 CVE-2008-4180 SREASON:4289  View
375551 34297 CVE-2008-4180 URL:http://securityreason.com/securityalert/4289  View
375552 34297 CVE-2008-4180 XF:nooms-db-information-disclosure(45076)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50928 JVNDB-2008-006238 webCMS Portal Edition の index.php におけるクロスサイトスクリプティングの脆弱性 webCMS Portal Edition の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-4184 34297 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006238.html  View