Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xoops xoops 2.0.9.3 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2005-2112
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php.
Xoops Xoops 2.0Xoops Xoops 2.0.5.1Xoops Xoops 2.0.5.2Xoops Xoops 2.0.11Xoops Xoops 2.0.2Xoops Xoops 2.0.9Xoops Xoops 2.0.9.2Xoops Xoops 2.0.3Xoops Xoops 2.0.4Xoops Xoops 2.0.5Xoops Xoops 2.0.9.3Xoops Xoops 2.0.1Xoops Xoops 2.0.10Xoops Xoops 2.0.6Xoops Xoops 2.0.7
7.5
CVSSv2
CVE-2005-2113
SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and previous versions allows remote malicious users to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost ...
Xoops Xoops 2.0Xoops Xoops 2.0.1Xoops Xoops 2.0.5.1Xoops Xoops 2.0.5.2Xoops Xoops 2.0.4Xoops Xoops 2.0.5Xoops Xoops 2.0.10Xoops Xoops 2.0.11Xoops Xoops 2.0.6Xoops Xoops 2.0.7Xoops Xoops 2.0.2Xoops Xoops 2.0.3Xoops Xoops 2.0.9Xoops Xoops 2.0.9.2Xoops Xoops 2.0.9.3
5.1
CVSSv2
CVE-2006-2516
mainfile.php in XOOPS 2.0.13.2 and previous versions, when register_globals is enabled, allows remote malicious users to overwrite variables such as $xoopsOption['nocommon'] and conduct directory traversal attacks or include PHP files via (1) xoopsConfig[language] to mi...
Xoops Xoops 2.0Xoops Xoops 2.0.4Xoops Xoops 2.0.5Xoops Xoops 2.0.9.3Xoops XoopsXoops Xoops 2.0.11Xoops Xoops 2.0.12 JpXoops Xoops 2.0.6Xoops Xoops 2.0.7Xoops Xoops 2.0.13.1Xoops Xoops 2.0.2Xoops Xoops 2.0.3Xoops Xoops 2.0.9Xoops Xoops 2.0.9.2Xoops Xoops 2.0.1Xoops Xoops 2.0.10Xoops Xoops 2.0.5.1Xoops Xoops 2.0.5.2
7.5
CVSSv2
CVE-2009-3963
Multiple unspecified vulnerabilities in XOOPS prior to 2.4.0 Final have unknown impact and attack vectors.
Xoops Xoops 2.0.13.2Xoops Xoops 2.0.13.1Xoops Xoops 2.0.4Xoops Xoops 2.0.18.1Xoops Xoops 2.0.18Xoops Xoops 2.3.2aXoops Xoops 2.2.3Xoops Xoops 2.0.17.1Xoops Xoops 2.0.11Xoops Xoops 2.0.12 JpXoops Xoops 2.0.2Xoops Xoops 2.0.6Xoops Xoops 2.0.9.3Xoops Xoops 2.0.9.2Xoops Xoops 2.0.1Xoops Xoops 2.0.10Xoops Xoops 2.0.3Xoops Xoops 2.0.17 1Xoops Xoops 2.3.1Xoops Xoops 2.0.7Xoops Xoops 2.0.16Xoops Xoops 2.0.14
5
CVSSv2
CVE-2009-4851
The activation resend function in the Profiles module in XOOPS prior to 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote malicious users to bypass administrative approval via a request involving activate.php.
Xoops Xoops 1.0Xoops Xoops 1.0 Rc3Xoops Xoops 1.3.10Xoops Xoops 1.3.9Xoops Xoops 2.0.0 Rc2Xoops Xoops 2.0.5 RcXoops Xoops 2.0.5.2Xoops Xoops 2.0.9.2Xoops Xoops 2.0.10 RcXoops Xoops 2.0.13Xoops Xoops 2.0.13.2Xoops Xoops 2.0.18Xoops Xoops 2.3.0 Alpha1Xoops Xoops 2.3.0Xoops Xoops 2.3.1Xoops Xoops 2.4.0 Beta 2Xoops XoopsXoops Xoops 1.3.5Xoops Xoops 1.3.6Xoops Xoops 1.3.7Xoops Xoops 1.3.8Xoops Xoops 2.0.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-34377CVE-2024-20859CVE-2023-49606injectarbitrary CVE-2024-33788CVE-2024-30973IDORCVE-2024-33907
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook