CVE-2014-8999

SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows remote authenticated users to execute arbitrary SQL commands via the selgroups parameter...

PT-2014-8778

Name of the Vulnerable Software and Affected Versions XOOPS versions prior to 2.5.7 Final Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the selgroups parameter in the /htdocs/modules/system/admin.php API endpoint. Recommendations F...

CVE-2014-8999: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows remote authenticated users to execute arbitrary SQL commands via the selgroups parameter...