Description
SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter.
Remediation
References
Related Vulnerabilities
Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-26047)
WordPress Plugin Limit Login Attempts Security Bypass (1.7.0)
Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2026-33857)
WordPress Plugin Log Emails Information Disclosure (1.0.6)
Apache Tomcat Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2021-42340)