← Back

Brim

brim

Vendor: Barry Nauta • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Barry Nauta
1Brim
Apr 23, 2026
Oct 20, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter in template.tpl.php in (1) templates/barre...Show more
Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter in template.tpl.php in (1) templates/barrel/, (2) templates/sidebar/, (3) templates/text-only, (4) templates/slashdot/, (5) templates/penguin/, (6) templates/pda/, (7) templates/oerdec/, (8) templates/nifty/, (9) templates/mylook, and (10) templates/barry/.Show less
1Barry Nauta
1Brim
Apr 23, 2026
Oct 20, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL.