Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xoops xoops 2.0.13.2 vulnerabilities and exploits

(subscribe to this query)
5.1
CVSSv2
CVE-2006-2516
mainfile.php in XOOPS 2.0.13.2 and previous versions, when register_globals is enabled, allows remote malicious users to overwrite variables such as $xoopsOption['nocommon'] and conduct directory traversal attacks or include PHP files via (1) xoopsConfig[language] to mi...
Xoops Xoops 2.0Xoops Xoops 2.0.4Xoops Xoops 2.0.5Xoops Xoops 2.0.9.3Xoops XoopsXoops Xoops 2.0.11Xoops Xoops 2.0.12 JpXoops Xoops 2.0.6Xoops Xoops 2.0.7Xoops Xoops 2.0.13.1Xoops Xoops 2.0.2Xoops Xoops 2.0.3Xoops Xoops 2.0.9Xoops Xoops 2.0.9.2Xoops Xoops 2.0.1Xoops Xoops 2.0.10Xoops Xoops 2.0.5.1Xoops Xoops 2.0.5.2
4.3
CVSSv2
CVE-2011-4565
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier versions, allow remote malicious users to inject arbitrary web script or HTML via the (1) text parameter to include/formdhtmltextarea_preview.php or (2) img BBCODE tag within the message pa...
Xoops Xoops 2.0.2Xoops Xoops 2.5.0Xoops Xoops 2.3.3bXoops Xoops 2.3.3Xoops Xoops 2.0.18.1Xoops Xoops 2.0.18Xoops Xoops 2.0.14Xoops XoopsXoops Xoops 2.5.1Xoops Xoops 2.4.1Xoops Xoops 2.4.0Xoops Xoops 2.0.18.2Xoops Xoops 2.0.17Xoops Xoops 2.0.16Xoops Xoops 2.0.15Xoops Xoops 2.4.5Xoops Xoops 2.4.4Xoops Xoops 2.3.2bXoops Xoops 2.3.2aXoops Xoops 2.0.17.1Xoops Xoops 2.0.13.2Xoops Xoops 2.4.3
7.5
CVSSv2
CVE-2009-3963
Multiple unspecified vulnerabilities in XOOPS prior to 2.4.0 Final have unknown impact and attack vectors.
Xoops Xoops 2.0.13.2Xoops Xoops 2.0.13.1Xoops Xoops 2.0.4Xoops Xoops 2.0.18.1Xoops Xoops 2.0.18Xoops Xoops 2.3.2aXoops Xoops 2.2.3Xoops Xoops 2.0.17.1Xoops Xoops 2.0.11Xoops Xoops 2.0.12 JpXoops Xoops 2.0.2Xoops Xoops 2.0.6Xoops Xoops 2.0.9.3Xoops Xoops 2.0.9.2Xoops Xoops 2.0.1Xoops Xoops 2.0.10Xoops Xoops 2.0.3Xoops Xoops 2.0.17 1Xoops Xoops 2.3.1Xoops Xoops 2.0.7Xoops Xoops 2.0.16Xoops Xoops 2.0.14
5
CVSSv2
CVE-2009-4851
The activation resend function in the Profiles module in XOOPS prior to 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote malicious users to bypass administrative approval via a request involving activate.php.
Xoops Xoops 1.0Xoops Xoops 1.0 Rc3Xoops Xoops 1.3.10Xoops Xoops 1.3.9Xoops Xoops 2.0.0 Rc2Xoops Xoops 2.0.5 RcXoops Xoops 2.0.5.2Xoops Xoops 2.0.9.2Xoops Xoops 2.0.10 RcXoops Xoops 2.0.13Xoops Xoops 2.0.13.2Xoops Xoops 2.0.18Xoops Xoops 2.3.0 Alpha1Xoops Xoops 2.3.0Xoops Xoops 2.3.1Xoops Xoops 2.4.0 Beta 2Xoops XoopsXoops Xoops 1.3.5Xoops Xoops 1.3.6Xoops Xoops 1.3.7Xoops Xoops 1.3.8Xoops Xoops 2.0.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661open redirectCVE-2024-25512CVE-2024-33788command injectionSSTICVE-2024-0043CVE-2024-29210CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook