CVE-2008-1351

2008-03-1716:00:00

mitre

www.cve.org

AI Score

8.3

Confidence

Low

EPSS

0.002

Percentile

60.4%

JSON

SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php.

References

secunia.com/advisories/29358

www.securityfocus.com/bid/28230

www.exploit-db.com/exploits/5245