Xoops Xoops vulnerabilities

• xoops cms XOOPS CMS 2.5.9 SQL Injection via gerar_pdf.php CVE-2019-25433 8.8 HighFebruary 22, 2026
• xoops Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute... CVE-2023-36217 9.0 CriticalAugust 3, 2023
• xoops An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript... CVE-2019-16684 4.8 MediumSeptember 30, 2019
• xoops An issue was discovered in the image-manager in Xoops 2.5.10. When the breadcrumb showing the... CVE-2019-16683 4.8 MediumSeptember 30, 2019
• xoops XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in... CVE-2017-12139 6.1 MediumAugust 2, 2017
• xoops XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php... CVE-2017-12138 6.1 MediumAugust 2, 2017
• xoops In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed... CVE-2017-11174 9.8 CriticalJuly 12, 2017
• xoops XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in... CVE-2017-7944 6.1 MediumApril 24, 2017
• xoops SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote... CVE-2017-7290 7.2 HighMarch 30, 2017
• xoops SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows... CVE-2014-8999 6.5 MediumNovember 20, 2014
• xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers... CVE-2012-0984 Public exploit 4.3 MediumSeptember 11, 2014
• xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier... CVE-2011-4565 4.3 MediumNovember 28, 2011
• xoops XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a ... CVE-2011-3822 5.0 MediumSeptember 24, 2011
• xoops The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation... CVE-2009-4851 5.0 MediumMay 7, 2010
• xoops dictionary SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote... CVE-2009-4582 Public exploit 7.5 HighJanuary 6, 2010
• xoops Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack... CVE-2009-3963 7.5 HighNovember 17, 2009
• xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to... CVE-2009-2783 Public exploit 4.3 MediumAugust 17, 2009
• xoops Cross-site scripting (XSS) vulnerability in pmlite.php in XOOPS 2.3.1 and 2.3.2a allows remote... CVE-2008-6885 4.3 MediumJuly 31, 2009
• xoops Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled,... CVE-2008-6884 Public exploit 6.8 MediumJuly 31, 2009
• xoops SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers... CVE-2008-5665 Public exploit 7.5 HighDecember 18, 2008
• xoops Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote... CVE-2008-3296 Public exploit 7.5 HighJuly 25, 2008
• xoops Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows... CVE-2008-3295 Public exploit 4.3 MediumJuly 25, 2008
• bluemoon backpack, bmsurvey, popnupblog +4 more +6 more Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2)... CVE-2008-2035 4.3 MediumApril 30, 2008
• xoops rmsoft gallery system Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System ... CVE-2008-1064 4.3 MediumFebruary 28, 2008
• xoops Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to... CVE-2008-0613 Public exploit 5.0 MediumFebruary 6, 2008
• xoops Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote... CVE-2008-0612 Public exploit 7.5 HighFebruary 6, 2008
• rmsoft gallery system, xoops +1 more SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS... CVE-2008-0611 Public exploit 7.5 HighFebruary 6, 2008
• xoops xoopsgallery module PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module... CVE-2008-0138 Public exploit 6.8 MediumJanuary 8, 2008
• xoops The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS... CVE-2007-6675 5.0 MediumJanuary 8, 2008
• xoops Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows... CVE-2007-5188 7.5 HighOctober 3, 2007
• xoops glossaire module SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for... CVE-2007-2738 Public exploit 7.5 HighMay 17, 2007
• xoops popnupblog SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops... CVE-2007-1979 Public exploit 7.5 HighApril 12, 2007
• xoops virii info module ** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and... CVE-2007-1976 Disputed 7.5 HighApril 12, 2007
• xoops Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute... CVE-2007-0377 7.5 HighJanuary 19, 2007
• xoops Cross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows... CVE-2006-5810 Public exploit 6.8 MediumNovember 8, 2006
• xoops rmsoft gallery system Cross-site scripting (XSS) vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows... CVE-2006-5532 6.8 MediumOctober 26, 2006
• xoops SQL injection vulnerability in edituser.php in Xoops before 2.0.15 allows remote attackers to... CVE-2006-4417 7.5 HighAugust 28, 2006
• xoops glossaire module PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows... CVE-2006-3363 Public exploit 5.1 MediumJuly 6, 2006
• xoops mainfile.php in XOOPS 2.0.13.2 and earlier, when register_globals is enabled, allows remote... CVE-2006-2516 Public exploit 5.1 MediumMay 22, 2006
• xoops pool module Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS... CVE-2006-0198 Public exploit 4.3 MediumJanuary 13, 2006
• xoops Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers... CVE-2005-3680 6.4 MediumNovember 18, 2005
• xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13... CVE-2005-2338 4.3 MediumOctober 26, 2005
• xoops SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and... CVE-2005-2113 Public exploit 7.5 HighJuly 1, 2005
• xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote... CVE-2005-2112 Public exploit 4.3 MediumJuly 1, 2005
• xoops The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote... CVE-2005-0743 7.5 HighMarch 13, 2005
• xoops Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5,... CVE-2004-2756 Public exploit 4.3 MediumDecember 31, 2004
• xoops XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information... CVE-2003-1550 Public exploit 5.0 MediumDecember 31, 2003
• xoops Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1... CVE-2003-1453 Public exploit 4.3 MediumDecember 31, 2003
• webchat.org webchat, xoops +1 more SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote... CVE-2002-2391 7.5 HighDecember 31, 2002
• xoops Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line... CVE-2002-2386 4.3 MediumDecember 31, 2002
• Show olderLoading…