CVE-2007-1816

CVE-2007-1816 describes an SQL injection in the XOOPS module Tutoriais , specifically in viewcat.php . The vulnerability is triggered through the cid parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation/sanitization of the cid parameter...

CVE-2008-1351

CVE-2008-1351 describes an SQL injection in the XOOPS Tutorials 2.1b module. The vulnerable entry point is printpage.php, where the tid parameter can be exploited to execute arbitrary SQL commands, reachable directly or via a printpage action to index.php. The associated references (Exploit-DB, S...