PT-2008-5461 · Nooms · Nooms

Dr.Crash + 1 · Published 2008-09-22 · Updated 2018-10-11 · CVE-2008-4162

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NooMS version 1.1

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved by manipulating a URL in the g site url parameter in the admin/auth.php file.

Recommendations For NooMS version 1.1, consider restricting access to the admin/auth.php file until a patch is available, and avoid using the g site url parameter in this context to minimize the risk of exploitation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2008-4162

Affected Products

Nooms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-4162 · Security Note
• http://securityfocus.com/archive/1/496236/100/0/threaded · Note
• http://securityreason.com/securityalert/4289 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45075 · Note