E-xoops

E-xoops

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2008-7036

Exploit
  • EPSS 0.26%
  • Published 24.08.2009 10:30:01
  • Last modified 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1...

7.5

CVE-2007-6380

Exploit
  • EPSS 0.24%
  • Published 15.12.2007 01:46:00
  • Last modified 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in e-Xoops (exoops) 1.08, and 1.05 Rev 1 through 3, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to (a) mylinks/ratelink.php, (b) adresses/ratefile.php, (c) mydownloads/rate...

5

CVE-2005-0827

  • EPSS 0.48%
  • Published 02.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote attackers to obtain sensitive information via an invalid parameter to the convertorderbytrans function, which...

5

CVE-2005-0828

Exploit
  • EPSS 5.46%
  • Published 02.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrate...

4.3

CVE-2005-0910

Exploit
  • EPSS 0.35%
  • Published 02.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat parameter to index.php.

5

CVE-2005-1031

  • EPSS 0.48%
  • Published 02.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.

7.5

CVE-2005-0911

  • EPSS 0.43%
  • Published 28.03.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter to index.php or (2) the artid parameter in the viewarticle action for index.php.