CVE-2008-4180: Nooms

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute force attacks against passwords via a username in the g_dbuser parameter and a password in the g_dbpwd parameter, and possibly a "localhost" g_dbhost parameter value, related to a "Mysql Remote Brute Force Vulnerability."

Affected products

• Nooms Nooms: version 1.1 only

Published 2008-09-23. Last modified 2026-06-16.