CVE-2008-1064

The CVE-2008-1064 entry concerns the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS, specifically in images.php where a Cross-site scripting (XSS) vulnerability exists. The underlying issue is an ability to inject arbitrary web script or HTML via the q parameter, enabling a...

CVE-2008-0611

CVE-2008-0611 : SQL injection in the RMSOFT Gallery System 2.0 module for XOOPS (rmgs/images.php) allows remote attackers to run arbitrary SQL via the id parameter. Affected component: rmgs/images.php in RMSOFT Gallery System 2.0 for XOOPS. Consequences: partial impact to confidentiality, integri...