High

DATE	CVE	VULNERABILITY TITLE	RISK
2008-03-17	CVE-2008-1351	SQL Injection vulnerability in Xoops Tutoriais Module 2.1B SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php. network low complexity xoops CWE-89	7.5
2007-04-02	CVE-2007-1816	SQL-Injection vulnerability in Tutoriais Module SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. network low complexity xoops	7.5