CVE-2009-4851

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

CVE-2019-16684

An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the list or in the Edit page, the payload executes...

EUVD-2008-0623

Malware in sbrugna...

EUVD-2003-1540

Malware in sbrugna...

EUVD-2007-1802

Malware in sbrugna...

EUVD-2005-0744

Malware in sbrugna...

EUVD-2006-2516

Malware in sbrugna...

EUVD-2008-3283

Malware in sbrugna...

EUVD-2007-5169

Malware in sbrugna...

EUVD-2008-3284

Malware in sbrugna...

EUVD-2007-1799

Malware in sbrugna...

EUVD-2003-1443

Malware in sbrugna...

EUVD-2005-2114

Malware in sbrugna...

CVE-2008-0937

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

CVE-2002-1802

Cross-site scripting XSS vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news...

CVE-2006-5810

Cross-site scripting XSS vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows remote attackers to inject arbitrary web script or HTML via the newdownloadshowdays parameter...

Xoops SQL Injection Vulnerability

XOOPS eXtensible Object Oriented Portal System is XOOPS team development and maintenance of a set of open source based on PHP and MySQL content management system . A SQL injection vulnerability exists in Xoops' findusers.php page. Since the url parameter is not filtered for malicious characters, ...

XOOPS Cross-Site Request Forgery Vulnerability

XOOPS eXtensible Object Oriented Portal System is XOOPS team development and maintenance of a set of open source based on PHP and MySQL content management system . Cross-site request forgery vulnerabilities exist in XOOPS 2.5.7.2. A remote attacker can exploit these vulnerabilities to perform...

XOOPS 'imagemanager.php' Local File Inclusion Vulnerability

XOOPS is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops"; ifdescription...

XOOPS 2.0.18 - modulessystemadmin.php?fct Traversal Local File Inclusion

XOOPS 2.0.18 - modulessystemadmin.php?fct Traversal Local File Inclusion source: https://www.securityfocus.com/bid/30330/info XOOPS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can...