Description
Cross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows remote attackers to inject arbitrary web script or HTML via the newdownloadshowdays parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin Jibu Pro Cross-Site Scripting (1.7)
WordPress Plugin SP Project & Document Manager Cross-Site Scripting (4.25)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3065)
PHP CVE-2011-1467 Vulnerability (CVE-2011-1467)
Oracle HTTP Server CVE-2019-2414 Vulnerability (CVE-2019-2414)