SQL injection vulnerability in article.php in the Article module for XOOPS allows remote malicious users to execute arbitrary SQL commands via the id parameter.
source: wwwsecurityfocuscom/bid/28879/info
XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in ...