Sploitus

44 exploited vulnerabilities in Xoops

Vulnerabilities with publicly known exploits

Vendors
Xoops, Xoops Team, Webchat, Rmsoft, Bluemoon, Red Mexico Rmsoft
With known exploits
44
Affected Xoops Xoops Dictionary versions
= 2.0.18
Affected Xoops versions
All versions
Affected Xoops Mylinks Module versions
= 2.0.17.1
Affected Xoops Horoscope Module versions
= 1.0
Affected Xoops Xfsection Module versions
= 1.07
Affected Touteresa Resmanager versions
≤ 1.2.1
Affected Wf-links versions
≤ 1.03
Affected Xoops Tutoriais Module versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 32 of these already have exploit code on Sploitus

CVE-2009-4582 1 exploit
CVSS 7.5 HIGH 2010-01-06FIX AVAILABLE
XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection
CVE-2008-5665 1 exploit
CVSS 7.5 HIGH 2008-12-18
XOOPS Module xhresim - SQL Injection
CVE-2008-3296 1 exploit
CVSS 7.5 HIGH 2008-07-25
XOOPS 2.0.18 - '/modules/system/admin.php?fct' Traversal Local File Inclusion
CVE-2008-0612 1 exploit
CVSS 7.5 HIGH 2008-02-06FIX AVAILABLE
XOOPS 2.0.18 - Local File Inclusion / URL Redirecting
CVE-2007-5978 1 exploit
CVSS 7.5 HIGH 2007-11-15
XOOPS 2.0.17.1 Mylinks Module - 'Brokenlink.php' SQL Injection
CVE-2007-3236 2 exploits
CVSS 7.5 HIGH 2007-06-15
Immunity Canvas: XOOPS_HOROSCOPEXOOPS Module horoscope 2.0 - Remote File Inclusion
CVE-2007-3222 1 exploit
CVSS 7.5 HIGH 2007-06-14FIX AVAILABLE
XOOPS Module XFsection - 'modify.php' Remote File Inclusion
CVE-2007-2735 1 exploit
CVSS 7.5 HIGH 2007-05-17
XOOPS Module resmanager 1.21 - Blind SQL Injection
CVE-2007-2373 1 exploit
CVSS 7.5 HIGH 2007-04-30FIX AVAILABLE
XOOPS Module WF-Links 1.03 - 'cid' SQL Injection
CVE-2007-1976
CVSS 7.5 HIGH 2007-04-12FIX AVAILABLE
CVE-2007-1816 1 exploit
CVSS 7.5 HIGH 2007-04-02FIX AVAILABLE
XOOPS Module Tutoriais - 'viewcat.php' SQL Injection
CVE-2007-1807 1 exploit
CVSS 7.5 HIGH 2007-04-02
XOOPS Module myAlbum-P 2.0 - 'cid' SQL Injection
CVE-2007-0377
CVSS 7.5 HIGH 2007-01-19
CVE-2005-2113 3 exploits
CVSS 7.5 HIGH 2005-07-01
XOOPS 2.0.11 - Multiple VulnerabilitiesXOOPS < 2.0.11 - Multiple Vulnerabilities
CVE-2002-2391
CVSS 7.5 HIGH 2002-12-31FIX AVAILABLE
CVE-2002-0217 1 exploit
CVSS 7.5 HIGH 2002-05-03FIX AVAILABLE
Xoops个人消息系统跨站脚本执行(CSS/XSS)漏洞
CVE-2017-7290
CVSS 7.2 HIGH 2017-03-30FIX AVAILABLE
CVE-2008-6884 1 exploit
CVSS 6.8 MEDIUM 2009-07-31FIX AVAILABLE
XOOPS 2.3.1 - Multiple Local File Inclusions
CVE-2007-3057 2 exploits
CVSS 6.8 MEDIUM 2007-06-06FIX AVAILABLE
Immunity Canvas: XOOPS_ICONTENTXOOPS Module icontent 1.0/4.5 - Remote File Inclusion
CVE-2006-5810 1 exploit
CVSS 6.8 MEDIUM 2006-11-08FIX AVAILABLE
Xoops 2.0.5 - 'NewList.php' Cross-Site Scripting
CVE-2014-8999
CVSS 6.5 MEDIUM 2014-11-20FIX AVAILABLE
CVE-2005-3680
CVSS 6.4 MEDIUM 2005-11-18FIX AVAILABLE
CVE-2006-2516 1 exploit
CVSS 5.1 MEDIUM 2006-05-22FIX AVAILABLE
XOOPS 2.0.13.2 - 'xoopsOption[nocommon]' Remote Command Execution
CVE-2008-0613 1 exploit
CVSS 5.0 MEDIUM 2008-02-06FIX AVAILABLE
XOOPS 2.0.18 - Local File Inclusion / URL Redirecting
CVE-2007-6675
CVSS 5.0 MEDIUM 2008-01-08FIX AVAILABLE
CVE-2003-1550 1 exploit
CVSS 5.0 MEDIUM 2003-12-31
XOOPS 2.0 XoopsOption - Information Disclosure
CVE-2019-16684
CVSS 4.8 MEDIUM 2019-09-30
CVE-2019-16683
CVSS 4.8 MEDIUM 2019-09-30
CVE-2012-0984 7 exploits
CVSS 4.3 MEDIUM 2014-09-11FIX AVAILABLE
XOOPS 2.5.4 Multiple XSS VulnerabilitiesXOOPS 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-4565
CVSS 4.3 MEDIUM 2011-11-28FIX AVAILABLE
CVE-2009-4714 1 exploit
CVSS 4.3 MEDIUM 2010-03-15
XOOPS Celepar Module Qas - 'codigo' SQL Injection
CVE-2009-2783 1 exploit
CVSS 4.3 MEDIUM 2009-08-17FIX AVAILABLE
XOOPS 2.3.3 - 'op' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6885
CVSS 4.3 MEDIUM 2009-07-31FIX AVAILABLE
CVE-2008-4435 2 exploits
CVSS 4.3 MEDIUM 2008-10-03FIX AVAILABLE
RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS search.php?key' Cross-Site ScriptingRMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS down.php?id' Cross-Site Scripting
CVE-2008-4432 1 exploit
CVSS 4.3 MEDIUM 2008-10-03FIX AVAILABLE
RMSOFT MiniShop 1.0 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-4053 1 exploit
CVSS 4.3 MEDIUM 2008-09-11FIX AVAILABLE
Bluemoon inc. PopnupBlog 3.30 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-3295 1 exploit
CVSS 4.3 MEDIUM 2008-07-25FIX AVAILABLE
XOOPS 2.0.18 - '/modules/system/admin.php?fct' Cross-Site Scripting
CVE-2008-1064
CVSS 4.3 MEDIUM 2008-02-28FIX AVAILABLE
CVE-2006-0198 1 exploit
CVSS 4.3 MEDIUM 2006-01-13
Xoops Pool Module - IMG Tag HTML Injection
CVE-2005-2112 2 exploits
CVSS 4.3 MEDIUM 2005-07-01FIX AVAILABLE
XOOPS 2.0.11 - Multiple VulnerabilitiesXOOPS < 2.0.11 - Multiple Vulnerabilities
CVE-2004-2756 1 exploit
CVSS 4.3 MEDIUM 2004-12-31FIX AVAILABLE
Xoops 2.0.x - 'viewtopic.php' Cross-Site Scripting
CVE-2004-1640 1 exploit
CVSS 4.3 MEDIUM 2004-08-28FIX AVAILABLE
Nagl XOOPS Dictionary Module 1.0 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2003-1453 1 exploit
CVSS 4.3 MEDIUM 2003-12-31FIX AVAILABLE
Xoops 1.3.x/2.0 MyTextSanitizer - HTML Injection
CVE-2002-1802 1 exploit
CVSS 4.3 MEDIUM 2002-12-31FIX AVAILABLE
XOOPS 1.0 RC3 - HTML Injection