CVE-2020-5624

SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2020-5625

The CVE-2020-5625 issue affects XOOPS module XooNIps (versions 3.48 and earlier). Multiple connected sources confirm a Cross-site Scripting vulnerability that allows an arbitrary script to execute in the user’s browser via unspecified vectors. Public impact notes indicate that an attacker could r...

CVE-2020-5625

Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2020-5624

The CVE-2020-5624 entry concerns the XOOPS module XooNIps (versions 3.48 and earlier). The connected records confirm a SQL injection flaw in this module, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability affects XooNIps 3.48 and earlier and is ...

CVE-2020-5624

SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

JVN#40725650: Multiple vulnerabilities in XOOPS module "XooNIps"

XOOPS module "XooNIps" contains multiple vulnerabilities listed below. SQL injectionCWE-89 - CVE-2020-5624 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L| Base Score: 7.3 CVSS v2| AV:N/AC:L/Au:N/C:P/I:P/A:P| Base Score: 7.5 Cross-site Scripting CWE-79 -...

CVE-2014-1968

Cross-site scripting XSS vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1968

CVE-2014-1968 affects XooNIps module for XOOPS (versions 3.47 and earlier). The vulnerability is a cross-site scripting (XSS) issue caused by improper handling of output character strings, enabling remote attackers to inject arbitrary script/HTML via unspecified vectors. Impact is an arbitrary sc...

CVE-2014-1968

Cross-site scripting XSS vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

XooNIps vulnerable to cross-site scripting

Overview XooNIps provided by Neuroinformatics Japan Center, RIKEN Brain Science Institute is a module of XOOPS. XooNIps contains an issue in processing the output of input character string to the web page, which may result in a cross-site scripting vulnerability. Koki Takahashi of Keiji Takeda La...

JVN#87797318: XooNIps vulnerable to cross-site scripting

XooNIps provided by Neuroinformatics Japan Center, RIKEN Brain Science Institute is a module of XOOPS. XooNIps contains an issue in processing the output of input character string to the web page, which may result in a cross-site scripting vulnerability. Impact An arbitrary script may be executed...