CVEvulnerability
CVE-2008-1351
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php.
Affected configurations
• xoops tutoriais module 2.1b
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/29358 Vendor Advisory
- http://www.securityfocus.com/bid/28230 www.securityfocus.com
- https://www.exploit-db.com/exploits/5245 www.exploit-db.com
- http://secunia.com/advisories/29358 Vendor Advisory
- http://www.securityfocus.com/bid/28230 www.securityfocus.com
- https://www.exploit-db.com/exploits/5245 www.exploit-db.com