Skip to content
OpenAdvisories

Product · Xoops

XOOPS CMS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2019-25433

    XOOPS CMS 2.5.9 SQL Injection via gerar_pdf.php

    XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the gerar_pdf.php endpoint with malicious cid valu…

    Xoops XOOPS CMS