Xoops Archives - CVE Vulnerability

CVE-2008-7178

Sun, 26 Feb 2023 09:11:54 +0000

Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a downloadfile action to index.php.

The post CVE-2008-7178 appeared first on CVE Vulnerability.

CVE-2008-6885

Sun, 26 Feb 2023 09:11:45 +0000

Cross-site scripting (XSS) vulnerability in pmlite.php in XOOPS 2.3.1 and 2.3.2a allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute in a URL BBcode tag in a private message.

The post CVE-2008-6885 appeared first on CVE Vulnerability.

CVE-2008-6884

Sun, 26 Feb 2023 09:11:45 +0000

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter to (1) blocks.php and (2) main.php in xoops_lib/modules/protector/.

The post CVE-2008-6884 appeared first on CVE Vulnerability.

CVE-2008-4653

Sun, 26 Feb 2023 09:10:39 +0000

SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.

The post CVE-2008-4653 appeared first on CVE Vulnerability.

CVE-2008-3560

Sun, 26 Feb 2023 09:10:04 +0000

Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter.

The post CVE-2008-3560 appeared first on CVE Vulnerability.

CVE-2008-2094

Sun, 26 Feb 2023 09:09:21 +0000

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.

The post CVE-2008-2094 appeared first on CVE Vulnerability.

CVE-2008-0936

Sun, 26 Feb 2023 09:08:47 +0000

SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.

The post CVE-2008-0936 appeared first on CVE Vulnerability.

CVE-2008-0874

Sun, 26 Feb 2023 09:08:45 +0000

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.

The post CVE-2008-0874 appeared first on CVE Vulnerability.

CVE-2008-0847

Sun, 26 Feb 2023 09:08:44 +0000

SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter.

The post CVE-2008-0847 appeared first on CVE Vulnerability.

CVE-2007-5978

Sun, 26 Feb 2023 09:07:57 +0000

SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter.

The post CVE-2007-5978 appeared first on CVE Vulnerability.