CVE-2008-4162

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the gsiteurl parameter...

Open redirect

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the gsiteurl parameter...

CVE-2008-4162

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the gsiteurl parameter...

CVE-2008-4162

CVE-2008-4162 describes an open redirect in NooMS 1.1, exploitable through admin/auth.php via the g_site_url parameter to redirect users to arbitrary sites, enabling phishing. The affected software is NooMS 1.1; the vulnerability is tied to improper handling of g_site_url leading to user redirect...

CVE-2008-4162: Improper Link Resolution Before File Access

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the gsiteurl parameter...

nooms-xss.txt

---------------------------------------------------------------- Script : Nooms 1.1 Type : Multiple Vulnerabilities Cross Site Scripting/Redirect/Mysql Brute Force Local Access Risk : Medium ---------------------------------------------------------------- Download From :...

Nooms 1.1 - smileys.php?page_id Cross-Site Scripting

Nooms 1.1 - smileys.php?pageid Cross-Site Scripting source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

Nooms 1.1 - 'search.php?q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Nooms 1.1 - 'smileys.php?page_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Nooms 1.1 - search.php?q Cross-Site Scripting

Nooms 1.1 - search.php?q Cross-Site Scripting source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code i...