CVE-2017-7290 | BDVDB-2026-83395 Detail

Description#

SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gist.github.com/jk1986/3b304ac6b4ae52ae667bba380c2dce19
http://www.securityfocus.com/bid/97230

Exploit#

No public exploit known

History#

Version 12017-03-30Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.