XOOPS Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2008-5665 - Vulnerability Database
XOOPS Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2008-5665
High
Reference:
CVE-2008-5665
Title:
XOOPS Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Overview:
SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter.