EUVD-2017-16915

Malware in sbrugna...

EUVD-2017-3723

Malware in sbrugna...

CVE-2017-12139

XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...

CVE-2017-12138

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

CVE-2017-12138

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

CVE-2017-12138

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

XOOPS Core /modules/profile/index.php redirection vulnerability

XOOPS is XOOPS team development and maintenance of a set of open source PHP and MySQL based content management system . XOOPS /modules/profile/index.php file has a redirection vulnerability that allows attackers to construct malicious URIs, entice users to parse, redirect users to any WEB site fo...

CVE-2017-12139: Improper Neutralization of Input During Web Page Generation

XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...

CVE-2017-12138: URL Redirection to Untrusted Site

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

XOOPS Core Install DB SQL Injection Vulnerability

XOOPS eXtensible Object Oriented Portal System is the XOOPS team develops and maintains a set of open source PHP and MySQL based content management system . The system can be used to create a variety of online communities . XOOPS Core is one of the core repository . A SQL injection vulnerability...

CVE-2017-7944

XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...

CVE-2017-7944

XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...

CVE-2017-7944: Improper Neutralization of Input During Web Page Generation

XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...

CVE-2007-1814

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377...