Description

Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in kernel/group.php in core, (2) the lid parameter in class/table_broken.php in the Weblinks module, and other unspecified vectors.

Remediation

References

CVE-2007-0377

Related Vulnerabilities

WordPress Plugin Google Pagespeed Insights Cross-Site Scripting (3.0.0)

MediaWiki Incorrect Default Permissions Vulnerability (CVE-2017-0369)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7076)

Moodle Other Vulnerability (CVE-2004-2232)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5953)

Severity

High

Classification

CVE-2007-0377

Tags

Missing Update Known Vulnerabilities