EUVD-2008-1358

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php...

CVE-2008-1351

CVE-2008-1351 describes an SQL injection in the XOOPS Tutorials 2.1b module. The vulnerable entry point is printpage.php, where the tid parameter can be exploited to execute arbitrary SQL commands, reachable directly or via a printpage action to index.php. The associated references (Exploit-DB, S...