Login Request a demo
XO
Vendor
Xoops
44 products with CVEs on record
90
CVEs
0
On KEV
0
New 30D
Products
XO
Xoops
Xoops
9.8
43 CVEs0 on KEV0 new
TM
Tutoriais Module
Xoops
–
2 CVEs0 on KEV0 new
XM
XM Memberstats
Xoops
–
2 CVEs0 on KEV0 new
XG
Xoops Glossaire Module
Xoops
–
2 CVEs0 on KEV0 new
XR
Xoops Rmsoft Gallery System
Xoops
–
2 CVEs0 on KEV0 new
AM
Article Module
Xoops
–
1 CVEs0 on KEV0 new
AM
Articles Module
Xoops
–
1 CVEs0 on KEV0 new
CC
Cjay Content Module
Xoops
–
1 CVEs0 on KEV0 new
CM
Core Module
Xoops
–
1 CVEs0 on KEV0 new
EM
Eempregos Module
Xoops
–
1 CVEs0 on KEV0 new
FM
Flashgames Module
Xoops
–
1 CVEs0 on KEV0 new
FM
Friendfinder Module
Xoops
–
1 CVEs0 on KEV0 new
GM
Glossaire Module
Xoops
–
1 CVEs0 on KEV0 new
HL
Happy Linux Xfsection Module
Xoops
–
1 CVEs0 on KEV0 new
HM
Horoscope Module
Xoops
–
1 CVEs0 on KEV0 new
IM
Icontent Module
Xoops
–
1 CVEs0 on KEV0 new
JM
John Mordo Jobs Module
Xoops
–
1 CVEs0 on KEV0 new
KM
Kshop Module
Xoops
–
1 CVEs0 on KEV0 new
LM
Library Module
Xoops
–
1 CVEs0 on KEV0 new
MA
Makale
Xoops
–
1 CVEs0 on KEV0 new
MS
Malaika System Myads Module
Xoops
–
1 CVEs0 on KEV0 new
MM
Myconference Module
Xoops
–
1 CVEs0 on KEV0 new
MM
Mylinks Module
Xoops
–
1 CVEs0 on KEV0 new
MY
Mytopics
Xoops
–
1 CVEs0 on KEV0 new
PL
Prayer List Module
Xoops
–
1 CVEs0 on KEV0 new
RM
Repository Module
Xoops
–
1 CVEs0 on KEV0 new
RD
Rha7 Downloads Module
Xoops
–
1 CVEs0 on KEV0 new
TE
Tiny Event Module
Xoops
–
1 CVEs0 on KEV0 new
TM
Tinycontent Module
Xoops
–
1 CVEs0 on KEV0 new
UP
Uploader
Xoops
–
1 CVEs0 on KEV0 new
WF
Wf-downloads
Xoops
–
1 CVEs0 on KEV0 new
WF
Wf-snippets
Xoops
–
1 CVEs0 on KEV0 new
WM
Wfquotes Module
Xoops
–
1 CVEs0 on KEV0 new
WM
Wiwimod Module
Xoops
–
1 CVEs0 on KEV0 new
XM
Xfsection Module
Xoops
–
1 CVEs0 on KEV0 new
XC
XOOPS CMS
Xoops
8.2
1 CVEs0 on KEV0 new
XC
Xoops Cube
Xoops
–
1 CVEs0 on KEV0 new
XD
Xoops Dictionary
Xoops
–
1 CVEs0 on KEV0 new
XP
Xoops Pool Module
Xoops
–
1 CVEs0 on KEV0 new
XP
Xoops Popnupblog
Xoops
–
1 CVEs0 on KEV0 new
XV
Xoops Virii Info Module
Xoops
–
1 CVEs0 on KEV0 new
XM
Xoopsgallery Module
Xoops
–
1 CVEs0 on KEV0 new
XM
Xt-conteudo Module
Xoops
–
1 CVEs0 on KEV0 new
ZM
Zmagazine Module
Xoops
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2019-25433
XC
XOOPS CMS
Xoops
8.2
0%
Feb 22XOOPS CMS 2.5.9 SQL Injection via gerar_pdf.php
CVE-2023-36217
XO
Xoops
Xoops
9.0
2%
Aug 3Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of the image manager function
CVE-2019-16684
XO
Xoops
Xoops
4.8
1%
Sep 30An issue was discovered in the image-manager in Xoops 2.5.10
CVE-2019-16683
XO
Xoops
Xoops
4.8
1%
Sep 30An issue was discovered in the image-manager in Xoops 2.5.10
CVE-2017-12139
XO
Xoops
Xoops
6.1
1%
Aug 2XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php
CVE-2017-12138
XO
Xoops
Xoops
6.1
3%
Aug 2XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter
CVE-2017-11174
XO
Xoops
Xoops
9.8
1%
Jul 12In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings…
CVE-2017-7944
XO
Xoops
Xoops
6.1
1%
Apr 24XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php
CVE-2017-7290
XO
Xoops
Xoops
7.2
2%
Mar 30SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter…
CVE-2014-8999
XO
Xoops
Xoops
–
2%
Nov 20SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows remote authenticated users to execute arbitrary SQL commands via the selgroups…
CVE-2012-0984
XO
Xoops
Xoops
–
4%
Sep 11Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) to_userid parameter to…
CVE-2014-3935
GM
Glossaire Module
Xoops
–
2%
Jun 2SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter
CVE-2011-4565
XO
Xoops
Xoops
–
1%
Nov 28Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) text…
CVE-2011-3822
XO
Xoops
Xoops
–
1%
Sep 24XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated…
CVE-2009-4851
XO
Xoops
Xoops
–
1%
May 7The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to…
CVE-2009-4582
XD
Xoops Dictionary
Xoops
–
1%
Jan 6SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter
CVE-2009-3963
XO
Xoops
Xoops
–
2%
Nov 17Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack vectors
CVE-2008-7178
UP
Uploader
Xoops
–
2%
Sep 8Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a
CVE-2009-2783
XO
Xoops
Xoops
–
2%
Aug 17Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) op parameter to…
CVE-2008-6885
XO
Xoops
Xoops
–
1%
Jul 31Cross-site scripting (XSS) vulnerability in pmlite.php in XOOPS 2.3.1 and 2.3.2a allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute in a URL…
CVE-2008-6884
XO
Xoops
Xoops
–
6%
Jul 31Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a
CVE-2008-5665
XO
Xoops
Xoops
–
1%
Dec 19SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter
CVE-2008-4653
MA
Makale
Xoops
–
1%
Oct 22SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id…
CVE-2008-3560
KM
Kshop Module
Xoops
–
1%
Aug 8Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search…
CVE-2008-3296
XO
Xoops
Xoops
–
6%
Jul 25Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary local files via a
CVE-2008-3295
XO
Xoops
Xoops
–
3%
Jul 25Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to inject arbitrary web script or HTML via the fct parameter
CVE-2008-2094
AM
Article Module
Xoops
–
1%
May 6SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter
CVE-2008-2035
XO
Xoops
Xoops
–
1%
Apr 30Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc
CVE-2008-1351
TM
Tutoriais Module
Xoops
–
1%
Mar 17SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is…
CVE-2008-1064
XR
Xoops Rmsoft Gallery System
Xoops
–
1%
Feb 28Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS allows remote attackers to inject arbitrary web…
CVE-2008-1065
XM
XM Memberstats
Xoops
–
1%
Feb 28Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the…
CVE-2008-1063
XM
Xm-memberstats
Xoops
–
1%
Feb 28Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-0937
TE
Tiny Event Module
Xoops
–
1%
Feb 25SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a…
CVE-2008-0936
PL
Prayer List Module
Xoops
–
1%
Feb 25SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a…
CVE-2008-0874
EM
Eempregos Module
Xoops
–
1%
Feb 21SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action
CVE-2008-0847
MY
Mytopics
Xoops
–
1%
Feb 21SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter
CVE-2008-0612
XO
Xoops
Xoops
–
3%
Feb 6Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a
CVE-2008-0613
XO
Xoops
Xoops
–
2%
Feb 6Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the…
CVE-2008-0611
XO
Xoops
Xoops
–
1%
Feb 6SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter
CVE-2008-0138
XM
Xoopsgallery Module
Xoops
–
5%
Jan 8PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when register_globals is disabled, allows remote attackers to execute…
CVE-2007-6675
XO
Xoops
Xoops
–
1%
Jan 8The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not check permissions, which allows remote attackers to read the…
CVE-2007-5978
MM
Mylinks Module
Xoops
–
1%
Nov 15SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter
CVE-2007-5188
XO
Xoops
Xoops
–
2%
Oct 3Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows remote attackers to upload arbitrary files via unspecified vectors related to…
CVE-2007-3311
AM
Articles Module
Xoops
–
1%
Jun 21SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter
CVE-2007-3289
WM
Wiwimod Module
Xoops
–
12%
Jun 20PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2007-3237
TM
Tinycontent Module
Xoops
–
68%
Jun 15PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a…
CVE-2007-3236
HM
Horoscope Module
Xoops
–
77%
Jun 15PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2007-3222
XM
Xfsection Module
Xoops
–
7%
Jun 14PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the dir_module…
CVE-2007-3221
XM
Xt-conteudo Module
Xoops
–
68%
Jun 14PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in…
CVE-2007-3220
CC
Cjay Content Module
Xoops
–
63%
Jun 14PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attackers to execute arbitrary PHP code via a…
CVE-2007-3057
IM
Icontent Module
Xoops
–
69%
Jun 6PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a…
CVE-2007-2738
XG
Xoops Glossaire Module
Xoops
–
1%
May 17SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter…
CVE-2007-2737
MM
Myconference Module
Xoops
–
1%
May 17SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter
CVE-2007-2571
WM
Wfquotes Module
Xoops
–
1%
May 9SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action
CVE-2007-2543
FM
Flashgames Module
Xoops
–
1%
May 9SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter
CVE-2007-2370
JM
John Mordo Jobs Module
Xoops
–
3%
Apr 30SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in…
CVE-2007-1979
XP
Xoops Popnupblog
Xoops
–
2%
Apr 12SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter,…
CVE-2007-1976
XV
Xoops Virii Info Module
Xoops
–
2%
Apr 12PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2007-1974
HL
Happy Linux Xfsection Module
Xoops
–
6%
Apr 12SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy…
CVE-2007-1962
WF
Wf-snippets
Xoops
–
1%
Apr 11SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a…