1462 matches found
CVE-2017-12138
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...
CVE-2017-12139
XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...
CVE-2017-12138
XOOPS Core 2.5.8 contains an open redirect vulnerability in /modules/profile/index.php caused by the URL filter. The Nuclei template confirms an open redirect where an attacker can redirect users to a malicious site, potentially enabling phishing or other unauthorized operations. Affected softwar...
CVE-2017-12139
CVE-2017-12139 affects XOOPS Core 2.5.8 with a stored XSS in imagemanager.php due to missing MIME type validation in htdocs/class/uploader.php. The issue is caused by inadequate validation of uploaded content, enabling an attacker to inject malicious script when the affected page is viewed. Conne...
CVE-2017-12139
XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...
CVE-2017-12138
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...
XOOPS Core /modules/profile/index.php redirection vulnerability
XOOPS is XOOPS team development and maintenance of a set of open source PHP and MySQL based content management system . XOOPS /modules/profile/index.php file has a redirection vulnerability that allows attackers to construct malicious URIs, entice users to parse, redirect users to any WEB site fo...
CVE-2017-12139: Improper Neutralization of Input During Web Page Generation
XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...
XOOPS Core imagemanager.php cross-site scripting vulnerability
XOOPS is XOOPS team development and maintenance of a set of open source PHP and MySQL based content management system . A cross-site scripting vulnerability exists in XOOPS imagemanager.php, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which...
CVE-2017-12138: URL Redirection to Untrusted Site
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...
XOOPS Core Install DB SQL Injection Vulnerability
XOOPS eXtensible Object Oriented Portal System is the XOOPS team develops and maintains a set of open source PHP and MySQL based content management system . The system can be used to create a variety of online communities . XOOPS Core is one of the core repository . A SQL injection vulnerability...
Sql injection
In install/pagedbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses...
CVE-2017-11174
In install/pagedbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses...
CVE-2017-11174
In install/pagedbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses...
CVE-2017-11174
CVE-2017-11174 is a SQL injection vulnerability affecting XOOPS Core 2.5.8.1, in the file install/page_dbsettings.php. The issue arises from unfiltered data being passed to CREATE and ALTER SQL queries, with a specific relation to GBK in CHARACTER SET and COLLATE clauses. The vulnerability allows...
CVE-2017-11174
In install/pagedbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses...
CVE-2017-11174: Improper Neutralization of Special Elements used in an SQL Command
In install/pagedbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses...
XOOPS <= 2.5.8.1 XSS Vulnerability
XOOPS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops";...
XOOPS Cross-Site Scripting Vulnerability
XOOPS eXtensible Object Oriented Portal System is the XOOPS team develops and maintains a set of open source PHP and MySQL based content management system . The system can be used to create a variety of online communities . XOOPS Core is one of the core repository . A cross-site scripting...