Description

SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter.

Remediation

References

CVE-2008-5665

Related Vulnerabilities

WordPress Plugin YITH WooCommerce Wishlist Unspecified Vulnerability (2.0.6)

Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2661)

WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.4)

MySQL CVE-2017-3639 Vulnerability (CVE-2017-3639)

Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3583)

Severity

High

Classification

CVE-2008-5665 CWE-138

Tags

Missing Update Known Vulnerabilities