Skip to content

Xoops · weakness class

SQL Injection

20 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

  1. PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when register_globals is disabled, allows remote attackers to execute a…CVE-2008-0138Xoops · 4.8% likely

    CWE-89

  2. SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter t…CVE-2017-7290Xoops · 2.3% likely

    CWE-89

  3. SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter.CVE-2014-3935Xoops · 2.1% likely

    CWE-89

  4. SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows remote authenticated users to execute arbitrary SQL commands via the selgroups pa…CVE-2014-8999Xoops · 1.7% likely

    CWE-89

  5. SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.CVE-2002-2391Xoops · 1.1% likely

    CWE-89

  6. Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the (1…CVE-2008-1065Xoops · 1.1% likely

    CWE-89

  7. SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a ca…CVE-2007-1962Xoops · 1.1% likely

    CWE-89

  8. SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arb…CVE-2007-1960Xoops · 1.0% likely

    CWE-89

  9. In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page…CVE-2017-11174Xoops · 1.0% likely

    CWE-89

  10. SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.CVE-2008-0874Xoops · 1.0% likely

    CWE-89

  11. SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter.CVE-2008-0847Xoops · 1.0% likely

    CWE-89

  12. SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id para…CVE-2008-4653Xoops · 1.0% likely

    CWE-89

  13. SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action.CVE-2007-2571Xoops · 1.0% likely

    CWE-89

  14. SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is acces…CVE-2008-1351Xoops · 1.0% likely

    CWE-89

  15. SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter.CVE-2007-5978Xoops · 1.0% likely

    CWE-89

  16. SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-2094Xoops · 1.0% likely

    CWE-89

  17. SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter.CVE-2008-5665Xoops · 1.0% likely

    CWE-89

  18. SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2009-4582Xoops · 1.0% likely

    CWE-89

  19. SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a…CVE-2008-0936Xoops · 1.0% likely

    CWE-89

  20. XOOPS CMS 2.5.9 SQL Injection via gerar_pdf.phpCVE-2019-25433Xoops · CVSS 8.2 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.