CVE-2008-4083

The CVE-2008-4083 entry documents a Cross-site Scripting (XSS) vulnerability in the Bookmarks plugin for Brim 2.0. The issue arises when an authenticated user adds an item via index.php, with the name parameter not properly sanitized, allowing arbitrary web script or HTML to be injected. Affected...

CVE-2008-2645

CVE-2008-2645 affects Brim (formerly Booby) 1.0.1. It describes multiple PHP remote file inclusion vulnerabilities: an attacker can trigger arbitrary PHP code execution by supplying a URL to the renderer parameter for template.tpl.php in eight template paths (barrel/, barry/, mylook/, oerdec/, pe...

CVE-2008-4082

BRIM 2.0.0 contains an SQL injection in the Tasks plugin triggered by arbitrary input in a search action to index.php when magic_quotes_gpc is disabled. The issue allows remote authenticated users to execute arbitrary SQL commands. Root cause: improper input handling in the Tasks plugin; affected...