XOOPS Module debaser SQL Injection (CVE-2007-1805)

An SQL injection vulnerability has been reported in Myxoops Debaser. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module MyConference SQL Injection (CVE-2007-2737)

An SQL injection vulnerability has been reported in Xoops Myconference Module. An attacker could exploit this vulnerability via the cid parameter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module WF Section SQL Injection (CVE-2005-0725)

An SQL injection vulnerability has been reported in Wf-sections. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Lykos Reviews SQL Injection (CVE-2007-1817)

An SQL injection vulnerability has been reported in Lykoszine Lykos Reviews Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Tiny Event Remote SQL Injection (CVE-2007-1811)

An SQL injection vulnerability has been reported in Chapi Tiny Event. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Repository Remote SQL Injection (CVE-2007-1847)

An SQL injection vulnerability has been reported in Xoops Repository Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module WF Links Remote SQL Injection (CVE-2007-2373)

An SQL injection vulnerability has been reported in Wf-links. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module makale Remote SQL Injection (CVE-2008-4653)

An SQL injection vulnerability has been reported in Xoops Makale. An attacker could exploit this vulnerability via the id parameter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2012-0984

Multiple cross-site scripting XSS vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 touserid parameter to modules/pm/pmlite.php or the 2 currentfile, 3 imgcatid, or 4 target parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 touserid parameter to modules/pm/pmlite.php or the 2 currentfile, 3 imgcatid, or 4 target parameter to...

CVE-2012-0984

The CVE-2012-0984 entry affects XOOPS before 2.5.5, with multiple XSS vulnerabilities exploitable via user-controlled inputs in several PHP scripts: to_userid (modules/pm/pmlite.php), current_file, imgcat_id, and target (class/xoopseditor/tinymce/tinymce/jscripts/tiny_mce/plugins/xoopsimagemanage...

CVE-2012-0984

Multiple cross-site scripting XSS vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 touserid parameter to modules/pm/pmlite.php or the 2 currentfile, 3 imgcatid, or 4 target parameter to...

Xoops 2.0.5 NewList.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20927/info Xoops is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

XOOPS 'badliege' Module - 'id' Parameter SQL Injection Vulnerability

XOOPS 'badliege' Module - 'id' Parameter SQL Injection Vulnerability 1.漏洞信息 XOOPS 'badliege'模块是一款基于PHP的WEB应用程序。 XOOPS 'badliege'模块不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'id'参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 2. 测试方法...

xoops module wiwimod 0.4 - Remote File Inclusion Vulnerability

No description provided by source. XOOPS Module WiwiMod v0.4 spawroot RFI Vulnerability D.Script: http://codigolivre.org.br/frs/download.php/1745/xoops2-modwiwimod0.4xavierjimenez.zip V.Code : include $spawroot.'config/spawcontrol.config.php'; include $spawroot.'class/toolbars.class.php'; include...

XOOPS <= 2.3.3 - Remote File Disclosure Vulnerability (.htaccess)

No description provided by source. ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca daath De Fulgentis -...

E-Xoops 1.0.5/1.0.8 myalbum/ratephoto.php lid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

XOOPS Module Glossarie <= 1.7 (sid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Glossarie = 1.7 sid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : inurl:/modules/glossaire/ S.Page : http://www.xoops.org/modules/repository/singlefile.php?cid=100&lid=1156 $$ : Fre...

XOOPS Module PopnupBlog <= 2.52 (postid) BLIND SQL Injection Exploit

No description provided by source. html head titleXOOPS Module PopnupBlog = 2.52 postid BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module PopnupBlog = 2.52...

SmartMedia Module 0.85 Beta for XOOPS 'categoryid' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37156/info The SmartMedia module for XOOPS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script cod...