Skip to content

CVE-2008-2094

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote...

7.5 HighPublic exploit

CVE-2008-2094 is a high vulnerability (CVSS 7.5) in Xoops Article Module, published May 6, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. No source names a fixed version.

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploit likelihood

0.98%Unchanged since Feb 4, 2022

What each source reports

NVD Score used 7.5

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.

Record: CVE-2008-2094
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.

Record: CVE-2008-2094
Updated: 2026-11-02

EUVDEUVD-2008-2091 No score

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.

Record: EUVD-2008-2091
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jqcr-fpgx-vxr8 No score

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote...

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.

Record: GHSA-jqcr-fpgx-vxr8
Weakness: CWE-89
Updated: 2026-11-02

Affected products

xoops article module

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	XOOPS 2.0.14 - 'article.php' SQL Injection	2010-08-28
Exploit-DB	XOOPS 2.0.14 Article Module - 'article.php' SQL Injection	2008-04-21

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References