Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
xoops xoops 2.5.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-0984
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS prior to 2.5.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) to_userid parameter to modules/pm/pmlite.php or the (2) current_file, (3) imgcat_id, or (4) target parameter to class/xoopse...
Xoops Xoops 2.5.2
Xoops Xoops 2.5.3
Xoops Xoops
Xoops Xoops 2.5.0
Xoops Xoops 2.5.1
3 EDB exploits
NA
CVE-2011-4565
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier versions, allow remote malicious users to inject arbitrary web script or HTML via the (1) text parameter to include/formdhtmltextarea_preview.php or (2) img BBCODE tag within the message pa...
Xoops Xoops 2.0.2
Xoops Xoops 2.5.0
Xoops Xoops 2.3.3b
Xoops Xoops 2.3.3
Xoops Xoops 2.0.18.1
Xoops Xoops 2.0.18
Xoops Xoops 2.0.14
Xoops Xoops
Xoops Xoops 2.5.1
Xoops Xoops 2.4.1
Xoops Xoops 2.4.0
Xoops Xoops 2.0.18.2
Xoops Xoops 2.0.17
Xoops Xoops 2.0.16
Xoops Xoops 2.0.15
Xoops Xoops 2.4.5
Xoops Xoops 2.4.4
Xoops Xoops 2.3.2b
Xoops Xoops 2.3.2a
Xoops Xoops 2.0.17.1
Xoops Xoops 2.0.13.2
Xoops Xoops 2.4.3
NA
CVE-2011-3822
XOOPS 2.5.0 allows remote malicious users to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/system/xoops_version.php and certain other files.
Xoops Xoops 2.5.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23316
SQL injection
type confusion
CVE-2024-20697
CVE-2024-4344
local
CVE-2024-30043
CVE-2024-3821
CVE-2024-5041
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started