CVE-2017-7290
N/A
N/A
Summary
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://gist.github.com/jk1986/3b304ac6b4ae52ae667bba380c2dce19
- http://www.securityfocus.com/bid/97230
References
- https://gist.github.com/jk1986/3b304ac6b4ae52ae667bba380c2dce19
- http://www.securityfocus.com/bid/97230
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.