CVE-2017-11174 | BDVDB-2026-87563 Detail

Description#

In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://tsublogs.wordpress.com/2017/07/12/xoops-core-2-5-8-1-install-db-sql-injection/

Exploit#

No public exploit known

History#

Version 12017-07-12Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.