SecurityTracker > View Topics > Vendor

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

Home | View Topics | Search | Contact Us |

View Topics > Vendor > Xoops.sourceforge.net

Jan 4 2010	XOOPS Input Validation Flaws Permit Cross-Site Scripting and SQL Injection Attacks
Jul 31 2009	XOOPS Input Validation Flaws in 'viewpmsg.php' and 'user.php' Permit Cross-Site Scripting Attacks
Mar 9 2005	XOOPS Avatar Image Upload Permits Unsafe File Extensions
Jan 28 2005	XOOPS Incontent Module Discloses PHP File Contents to Remote Users
Jan 26 2004	Xoops Input Validation Flaw in 'newbb' Module Permits Cross-Site Scripting Attacks
Dec 22 2003	XOOPS Input Filtering Flaw in Weblinks 'myheader.php' Permits Cross-Site Scripting Attacks
Dec 6 2003	Xoops Multiple Input Validation Flaws Let Remote Users Inject SQL Commands
Aug 13 2003	XOOPS Input Filtering Flaw in BBcode Tags Permits Remote Cross-Site Scripting Attacks
Jun 17 2003	XOOPS Forum Tutorials Module Lets Remote Users Execute Arbitrary Code
Apr 1 2003	XOOPS Glossary Module Input Validation Hole Lets Remote Users Conduct Cross-Site Scripting Attacks
Mar 20 2003	XOOPS Portal Software Discloses Installation Path to Remote Users
Dec 6 2002	XOOPS Portal Input Filtering Flaw in Private Message Module Lets Remote Users Execute Cross-Site Scripting Attacks
Nov 14 2002	XOOPS Quizz Module Input Filtering Bug Allows Remote Users to Conduct Cross-Site Scripting Attacks
Nov 14 2002	XOOPS WebChat Module Input Validation Flaw Lets Remote Users Inject and Execute SQL Commands on the Underlying Database Server
Sep 26 2002	(Vendor Issues Fix) Re: XOOPS Portal Input Validation Flaw in IMG Tags Lets Remote Users Conduct Cross-Site Scripting Attacks
Sep 24 2002	XOOPS Portal Input Validation Flaw in IMG Tags Lets Remote Users Conduct Cross-Site Scripting Attacks
Jan 29 2002	XOOPS Portal Software Private Message System Lets Remote Users Execute Javascript on the Recipient's Computer
Jan 27 2002	XOOPS Object-Oriented Web Portal Software Lets Remote Users Inject SQL Commands that Will Be Executed By the Underlying SQL Database