Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-4180

EPSS 0.28% · P52
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-4180

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute force attacks against passwords via a username in the g_dbuser parameter and a password in the g_dbpwd parameter, and possibly a "localhost" g_dbhost parameter value, related to a "Mysql Remote Brute Force Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
NooMS 'db.php '未明漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NooMS 1.1的db.php中存在未明漏洞。远程攻击者可以通过g_dbusername 参数重的一个用户名和g_dbpwd参数中的一个密码，又或者通过一个"localhost" g_dbhost参数值来引起对密码的强力攻击。它与一个 "Mysql 远程强力漏洞"有关。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-4180

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-4180

请登录查看更多情报信息。

Same Patch Batch · n/a · 2008-09-23 · 17 CVEs total

CVE-2008-3519JBoss企业应用平台类文件信息泄露漏洞
CVE-2008-3661Drupal 安全漏洞
CVE-2008-4174Dynamic MP3 Lister 'index.php' 多个跨站脚本攻击漏洞
CVE-2008-4175Link Bid Script 多个SQL注入漏洞
CVE-2008-4176FoT Video scripti 'izle.asp' SQL注入漏洞
CVE-2008-4177preprojects pre_real_estate_listings SQL注入漏洞
CVE-2008-4178DownlineGoldmine 多个SQL注入漏洞
CVE-2008-4179NooMS 多个跨站脚本攻击漏洞
CVE-2008-4181cPanel Netenberg Fantastico De Luxe 模块路径遍历漏洞
CVE-2008-4182Horde Turba Contact Manager '/imp/test.php' 跨站脚本攻击漏洞
CVE-2008-4183IntegraMOD Backup 目录信息泄露漏洞
CVE-2008-4184WebCMS Portal Edition 'index.php'多个跨站脚本攻击漏洞
CVE-2008-4185WebCMS Portal Edition 'index.php'参数id SQL注入漏洞
CVE-2008-4186WebCMS Portal Edition 'index.php'参数"id_doc" SQL注入漏洞
CVE-2008-4187ProActive CMS 'index.php'目录遍历漏洞
CVE-2008-4188TYPO3 Secure Directory 未明代码执行漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-4180

No comments yet

Leave a comment