Vulnerabilities > Xoops
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-04-11 | CVE-2007-1960 | SQL Injection vulnerability in Xoops Rha7 Downloads Module 1.0/1.10 SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter. | 7.5 |
| 2007-04-03 | CVE-2007-1847 | SQL Injection vulnerability in XOOPS Module Repository ViewCat.PHP SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. | 7.5 |
| 2007-04-03 | CVE-2007-1846 | SQL Injection vulnerability in Malaika System MyAds Xoops Module SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, different vectors than CVE-2006-3341. | 7.5 |
| 2007-04-03 | CVE-2007-1838 | SQL Injection vulnerability in Xoops Friendfinder Module View.PHP SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter. | 7.5 |
| 2007-04-02 | CVE-2007-1816 | SQL-Injection vulnerability in Tutoriais Module SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. | 7.5 |
| 2007-04-02 | CVE-2007-1815 | SQL-Injection vulnerability in Library Module SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. | 7.5 |
| 2007-04-02 | CVE-2007-1814 | SQL-Injection vulnerability in Core Module SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377. | 7.5 |
| 2007-01-19 | CVE-2007-0377 | SQL Injection vulnerability in Xoops 2.0.16 Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in kernel/group.php in core, (2) the lid parameter in class/table_broken.php in the Weblinks module, and other unspecified vectors. | 7.5 |
| 2006-10-26 | CVE-2006-5532 | Cross-Site Scripting vulnerability in Xoops Rmsoft Gallery System 2.0 Cross-site scripting (XSS) vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web script or HTML via the kw parameter. network xoops | 6.8 |
| 2006-08-28 | CVE-2006-4417 | SQL Injection vulnerability in Xoops Edituser.PHP SQL injection vulnerability in edituser.php in Xoops before 2.0.15 allows remote attackers to execute arbitrary SQL commands via the user_avatar parameter. | 7.5 |