Vulnerabilities (CVE)

Filtered by vendor Nwom Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-0249 1 Nwom 1 Nwom Topsites 2025-04-09 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary web script or HTML via the o parameter.
CVE-2007-0250 1 Nwom 1 Nwom Topsites 2025-04-09 5.0 MEDIUM N/A
index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' (quote) character in the o parameter, which forces a SQL error.