CVE-2020-5663

CVE-2020-5663 affects XooNIps 3.49 and earlier. The vulnerability is a stored cross-site scripting issue; a remote authenticated attacker can inject arbitrary scripts via unspecified vectors. Public documents corroborate this vulnerability across multiple sources (NVD, Red Hat, CNVD, JVN). Impact...

CVE-2020-5662

The CVE-2020-5662 case affects the XOOPS module XooNIps: reflected cross-site scripting vulnerabilities exist in version 3.49 and earlier. The root cause involves improper handling of user-supplied data, allowing a remote authenticated attacker to inject script via unspecified vectors, potentiall...

CVE-2020-5624

The CVE-2020-5624 entry concerns the XOOPS module XooNIps (versions 3.48 and earlier). The connected records confirm a SQL injection flaw in this module, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability affects XooNIps 3.48 and earlier and is ...

CVE-2020-5625

The CVE-2020-5625 issue affects XOOPS module XooNIps (versions 3.48 and earlier). Multiple connected sources confirm a Cross-site Scripting vulnerability that allows an arbitrary script to execute in the user’s browser via unspecified vectors. Public impact notes indicate that an attacker could r...

CVE-2020-5659

CVE-2020-5659 is a SQL injection vulnerability in XooNIps up to version 3.49 and earlier. The vulnerability allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. The root cause is inadequate validation of externally entered SQL statements in database-bas...

CVE-2020-5664

CVE-2020-5664 affects the XooNIps module for XOOPS (versions 3.49 and earlier). The vulnerability is described as a deserialization of untrusted data that could allow remote attackers to execute arbitrary code via unspecified vectors. Mitigation guidance in the sources is to update the software t...

CVE-2014-1968

CVE-2014-1968 affects XooNIps module for XOOPS (versions 3.47 and earlier). The vulnerability is a cross-site scripting (XSS) issue caused by improper handling of output character strings, enabling remote attackers to inject arbitrary script/HTML via unspecified vectors. Impact is an arbitrary sc...