Description
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program.
Remediation
References
Related Vulnerabilities
ownCloud Improper Authentication Vulnerability (CVE-2014-2047)
WordPress Plugin WP Photo Album Plus Cross-Site Scripting (5.0.10)
Jenkins Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-43497)
MySQL CVE-2018-3203 Vulnerability (CVE-2018-3203)
WordPress Plugin Plugin Central Multiple Cross-Site Scripting Vulnerabilities (2.5)