Security Advisory

CVE-2017-11174

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-07-12 21:00:00

Last updated 2024-08-05 17:57:57

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses.

← Browse all CVEs View on cve.org ↗