SQL Injection in Xoops Tutoriais Module
CVE-2008-1351
SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php.
Vulnerability class: SQL Injection
EPSS: 0.010 (59.2th percentile) — read the EPSS interpretation.
Affected products
- Xoops Tutoriais_module — versions 2.1b
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)