İçeriğe atla
Noroxi

Xoops kayıtları

xoops üreticisine ait 101 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
52
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

101 kayıt
  • CVE-2007-3236
    53Planlayın

    PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to execute arbitrary PHP

    YüksekCVSS 7,5Kavram kanıtıEPSS %77

    xoops · horoscope module14 Haz 2007

  • CVE-2007-3057
    48Planlayın

    PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS allows remote attacke

    OrtaCVSS 6,8Kavram kanıtıEPSS %69

    xoops · icontent module5 Haz 2007

  • CVE-2007-3221
    47Planlayın

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to

    OrtaCVSS 6,8Kavram kanıtıEPSS %68

    xoops · xt-conteudo module14 Haz 2007

  • CVE-2007-3237
    47Planlayın

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS allows remote attackers

    OrtaCVSS 6,8Kavram kanıtıEPSS %68

    xoops · tinycontent module14 Haz 2007

  • CVE-2007-3220
    46Planlayın

    PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attacke

    OrtaCVSS 6,8Kavram kanıtıEPSS %63

    xoops · cjay content module14 Haz 2007

  • CVE-2017-11174
    39İzleyin

    In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL

    KritikCVSS 9,8İstismar yokEPSS %1

    xoops · xoops12 Tem 2017

  • CVE-2023-36217
    36İzleyin

    Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of t

    KritikCVSS 9,0İstismar yokEPSS %2

    xoops · xoops3 Ağu 2023

  • CVE-2007-3289
    34İzleyin

    PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remote attackers to execut

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    xoops · wiwimod module20 Haz 2007

  • CVE-2007-3222
    32İzleyin

    PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to execute arbitrary PH

    YüksekCVSS 7,5Kavram kanıtıEPSS %7

    xoops · xfsection module14 Haz 2007

  • CVE-2008-3296
    32İzleyin

    Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary loc

    YüksekCVSS 7,5Kavram kanıtıEPSS %6

    xoops · xoops25 Tem 2008

  • CVE-2007-1974
    32İzleyin

    SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modul

    YüksekCVSS 7,5Kavram kanıtıEPSS %6

    wf-sections · wf-sections11 Nis 2007

  • CVE-2007-2370
    31İzleyin

    SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    xoops · john mordo jobs module30 Nis 2007

  • CVE-2008-0612
    31İzleyin

    Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    xoops · xoops6 Şub 2008

  • CVE-2007-5188
    31İzleyin

    Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows remote attackers to upload arbitrary files vi

    YüksekCVSS 7,5İstismar yokEPSS %2

    xoops · xoops3 Eki 2007

  • CVE-2007-1838
    31İzleyin

    SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQ

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    xoops · friendfinder module2 Nis 2007

  • CVE-2007-1979
    31İzleyin

    SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQ

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    xoops · xoops popnupblog11 Nis 2007

  • CVE-2007-1846
    31İzleyin

    SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL c

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    xoops · malaika system myads module3 Nis 2007

  • CVE-2008-7178
    31İzleyin

    Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a ..

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    xoops · xoops8 Eyl 2009

  • CVE-2007-0377
    31İzleyin

    Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in

    YüksekCVSS 7,5İstismar yokEPSS %2

    xoops · xoops19 Oca 2007

  • CVE-2014-3935
    31İzleyin

    SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL comm

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    xoops · glossaire module2 Haz 2014

  • CVE-2007-1976
    31İzleyin

    PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute

    YüksekCVSS 7,5İstismar yokEPSS %2

    xoops · xoops virii info module11 Nis 2007

  • CVE-2002-0217
    31İzleyin

    Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on o

    YüksekCVSS 7,5İstismar yokEPSS %2

    xoops · xoops16 May 2002

  • CVE-2006-4417
    31İzleyin

    SQL injection vulnerability in edituser.php in Xoops before 2.0.15 allows remote attackers to execute arbitrary SQL commands via the user_av

    YüksekCVSS 7,5İstismar yokEPSS %2

    xoops · xoops28 Ağu 2006

  • CVE-2009-4698
    31İzleyin

    Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL comman

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    xoops · xoops15 Mar 2010

  • CVE-2009-3963
    30İzleyin

    Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack vectors.

    YüksekCVSS 7,5İstismar yokEPSS %2

    xoops · xoops17 Kas 2009