EUVD-2017-16915

Malware in sbrugna...

EUVD-2017-3723

Malware in sbrugna...

CVE-2017-12138

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

CVE-2017-12139

XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...

CVE-2017-12138

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

CVE-2017-12138

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

CVE-2017-12138

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

CVE-2017-12139

XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...

CVE-2017-12138: URL Redirection to Untrusted Site

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

CVE-2017-12139: Improper Neutralization of Input During Web Page Generation

XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...

PT-2017-12360

Name of the Vulnerable Software and Affected Versions XOOPS Core version 2.5.8 Description The issue is related to stored XSS in imagemanager.php due to missing MIME type validation in htdocs/class/uploader.php. Recommendations For XOOPS Core version 2.5.8, consider validating MIME types in the...

PT-2017-12359

Name of the Vulnerable Software and Affected Versions XOOPS Core version 2.5.8 Description The issue is related to a stored URL redirect bypass in the /modules/profile/index.php file due to the URL filter. Recommendations For XOOPS Core version 2.5.8, update to a newer version that contains a fix...

XOOPS Core /modules/profile/index.php redirection vulnerability

XOOPS is XOOPS team development and maintenance of a set of open source PHP and MySQL based content management system . XOOPS /modules/profile/index.php file has a redirection vulnerability that allows attackers to construct malicious URIs, entice users to parse, redirect users to any WEB site fo...

XOOPS Core Install DB SQL Injection Vulnerability

XOOPS eXtensible Object Oriented Portal System is the XOOPS team develops and maintains a set of open source PHP and MySQL based content management system . The system can be used to create a variety of online communities . XOOPS Core is one of the core repository . A SQL injection vulnerability...

CVE-2017-7944

XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...

CVE-2017-7944

XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...

CVE-2017-7944

XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...

PT-2017-18017

Name of the Vulnerable Software and Affected Versions XOOPS Core version 2.5.8.1 Description The issue is related to unescaped HTML output of an Install DB failure error message in page dbsettings.php, which leads to a cross-site scripting XSS problem. Recommendations For XOOPS Core version...

CVE-2017-7944: Improper Neutralization of Input During Web Page Generation

XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...

CVE-2007-1814

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377...