brilaps records
4 published records for vendor brilaps.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
27Monitor | CVE-2008-7214No exploit | Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allomambo-foundation · mambo · CWE-352 | Medium6.8 | — | 0.7% | Sep 11, 2009 |
24Monitor | CVE-2008-7215No exploit | The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a mambo-foundation · mambo · CWE-20 | Medium5.8 | — | 1.8% | Sep 11, 2009 |
20Monitor | CVE-2008-7212No exploit | MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mammambo-foundation · mambo · CWE-264 | Medium5.0 | — | 1.7% | Sep 11, 2009 |
18Monitor | CVE-2008-7213Proof of concept | Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE mambo-foundation · mambo · CWE-79 | Medium4.3 | — | 2.2% | Sep 11, 2009 |
- CVE-2008-721427Monitor
Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allo
MediumCVSS 6.8No exploitEPSS 1%mambo-foundation · mamboSep 11, 2009
- CVE-2008-721524Monitor
The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a
MediumCVSS 5.8No exploitEPSS 2%mambo-foundation · mamboSep 11, 2009
- CVE-2008-721220Monitor
MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mam
MediumCVSS 5.0No exploitEPSS 2%mambo-foundation · mamboSep 11, 2009
- CVE-2008-721318Monitor
Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE
MediumCVSS 4.3Proof of conceptEPSS 2%mambo-foundation · mamboSep 11, 2009