Vulnerability Details CVE-2014-8999
SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows remote authenticated users to execute arbitrary SQL commands via the selgroups parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 74.2%
CVSS Severity
CVSS v2 Score 6.5
References
- http://packetstormsecurity.com/files/129134/XOOPS-2.5.6-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Nov/39
- http://www.securityfocus.com/bid/71117
- http://xoops.org/modules/news/article.php?storyid=6658
- http://packetstormsecurity.com/files/129134/XOOPS-2.5.6-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Nov/39
- http://www.securityfocus.com/bid/71117
- http://xoops.org/modules/news/article.php?storyid=6658