Xoops vulnerabilities

Products

• Xoops 43
• Tutoriais Module 2
• Glossaire Module 2
• Rmsoft Gallery System 2

Newest

• xoops cms XOOPS CMS 2.5.9 SQL Injection via gerar_pdf.php CVE-2019-25433 8.8 HighFebruary 22, 2026
• xoops Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute... CVE-2023-36217 9.0 CriticalAugust 3, 2023
• xoops An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript... CVE-2019-16684 4.8 MediumSeptember 30, 2019
• xoops An issue was discovered in the image-manager in Xoops 2.5.10. When the breadcrumb showing the... CVE-2019-16683 4.8 MediumSeptember 30, 2019
• xoops XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in... CVE-2017-12139 6.1 MediumAugust 2, 2017
• xoops XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php... CVE-2017-12138 6.1 MediumAugust 2, 2017
• xoops In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed... CVE-2017-11174 9.8 CriticalJuly 12, 2017
• xoops XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in... CVE-2017-7944 6.1 MediumApril 24, 2017
• xoops SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote... CVE-2017-7290 7.2 HighMarch 30, 2017
• xoops SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows... CVE-2014-8999 6.5 MediumNovember 20, 2014
• xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers... CVE-2012-0984 Public exploit 4.3 MediumSeptember 11, 2014
• xoops glossaire module SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows... CVE-2014-3935 Public exploit 7.5 HighJune 2, 2014
• xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier... CVE-2011-4565 4.3 MediumNovember 28, 2011
• xoops XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a ... CVE-2011-3822 5.0 MediumSeptember 24, 2011
• xoops The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation... CVE-2009-4851 5.0 MediumMay 7, 2010
• xoops dictionary SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote... CVE-2009-4582 Public exploit 7.5 HighJanuary 6, 2010
• xoops Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack... CVE-2009-3963 7.5 HighNovember 17, 2009
• xoops uploader Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to... CVE-2008-7178 Public exploit 7.5 HighSeptember 8, 2009
• xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to... CVE-2009-2783 Public exploit 4.3 MediumAugust 17, 2009
• xoops Cross-site scripting (XSS) vulnerability in pmlite.php in XOOPS 2.3.1 and 2.3.2a allows remote... CVE-2008-6885 4.3 MediumJuly 31, 2009
• xoops Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled,... CVE-2008-6884 Public exploit 6.8 MediumJuly 31, 2009
• xoops SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers... CVE-2008-5665 Public exploit 7.5 HighDecember 18, 2008
• xoops makale SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module... CVE-2008-4653 Public exploit 7.5 HighOctober 21, 2008
• xoops kshop module Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops... CVE-2008-3560 Public exploit 4.3 MediumAugust 8, 2008
• xoops Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote... CVE-2008-3296 Public exploit 7.5 HighJuly 25, 2008
• xoops Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows... CVE-2008-3295 Public exploit 4.3 MediumJuly 25, 2008
• xoops article module SQL injection vulnerability in article.php in the Article module for XOOPS allows remote... CVE-2008-2094 Public exploit 7.5 HighMay 6, 2008
• bluemoon backpack, bmsurvey, popnupblog +4 more +6 more Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2)... CVE-2008-2035 4.3 MediumApril 30, 2008
• xoops tutoriais module SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to... CVE-2008-1351 Public exploit 7.5 HighMarch 17, 2008
• xoops xm memberstats Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e... CVE-2008-1065 7.5 HighFebruary 28, 2008
• xoops rmsoft gallery system Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System ... CVE-2008-1064 4.3 MediumFebruary 28, 2008
• xoops xm-memberstats Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module... CVE-2008-1063 4.3 MediumFebruary 28, 2008
• tinyevent, xoops tiny event module +1 more SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS... CVE-2008-0937 Public exploit 6.8 MediumFebruary 25, 2008
• xoops prayer list module SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS... CVE-2008-0936 Public exploit 7.5 HighFebruary 25, 2008
• xoops eempregos module SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote... CVE-2008-0874 Public exploit 7.5 HighFebruary 21, 2008
• xoops mytopics SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers... CVE-2008-0847 Public exploit 7.5 HighFebruary 21, 2008
• xoops Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to... CVE-2008-0613 Public exploit 5.0 MediumFebruary 6, 2008
• xoops Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote... CVE-2008-0612 Public exploit 7.5 HighFebruary 6, 2008
• rmsoft gallery system, xoops +1 more SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS... CVE-2008-0611 Public exploit 7.5 HighFebruary 6, 2008
• xoops xoopsgallery module PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module... CVE-2008-0138 Public exploit 6.8 MediumJanuary 8, 2008
• xoops The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS... CVE-2007-6675 5.0 MediumJanuary 8, 2008
• xoops mylinks module SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote... CVE-2007-5978 Public exploit 7.5 HighNovember 15, 2007
• xoops Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows... CVE-2007-5188 7.5 HighOctober 3, 2007
• xoops articles module SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows... CVE-2007-3311 Public exploit 7.5 HighJune 21, 2007
• xoops wiwimod module PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module... CVE-2007-3289 Public exploit EPSS 12.2% 7.5 HighJune 20, 2007
• xoops tinycontent module PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1... CVE-2007-3237 Public exploit EPSS 67.7% 6.8 MediumJune 15, 2007
• xoops horoscope module PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS... CVE-2007-3236 Public exploit EPSS 77.0% 7.5 HighJune 15, 2007
• xoops xfsection module PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS... CVE-2007-3222 Public exploit 7.5 HighJune 14, 2007
• xoops xt-conteudo module PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo... CVE-2007-3221 Public exploit EPSS 67.8% 6.8 MediumJune 14, 2007
• xoops cjay content module PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay... CVE-2007-3220 Public exploit EPSS 62.7% 6.8 MediumJune 14, 2007
• Show olderLoading…