Description

Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in kernel/group.php in core, (2) the lid parameter in class/table_broken.php in the Weblinks module, and other unspecified vectors.

Remediation

References

CVE-2007-0377

Related Vulnerabilities

TYPO3 Cryptographic Issues Vulnerability (CVE-2013-7075)

WordPress Plugin Yoast SEO Cross-Site Scripting (5.7.1)

WordPress Plugin WP Symposium Arbitrary File Upload Vulnerabilities (11.11.26)

Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7929)

Oracle Database Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2018-10237)

Severity

High

Classification

CVE-2007-0377

Tags

Missing Update Known Vulnerabilities