|
XOOPS 'mydirname' Parameter Multiple PHP Code Injection Vulnerabilities
XOOPS is prone to multiple remote PHP code-injection vulnerabilities because it fails to adequately validate user-supplied input. An attacker can exploit these issues to inject and execute arbitrary PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying computer; other attacks are also possible. XOOPS 2.3.2 is vulnerable; other versions may also be affected. |
|
 Privacy Statement |
