PT-2017-11797

Name of the Vulnerable Software and Affected Versions XOOPS version 2.5.8.1 Description The issue is related to SQL Injection in the database settings page due to unfiltered data being passed to CREATE and ALTER SQL queries. This is caused by the use of GBK in CHARACTER SET and COLLATE clauses in...

PT-2017-18017

Name of the Vulnerable Software and Affected Versions XOOPS Core version 2.5.8.1 Description The issue is related to unescaped HTML output of an Install DB failure error message in page dbsettings.php, which leads to a cross-site scripting XSS problem. Recommendations For XOOPS Core version...