← Database

CVE-2008-4433

HIGH CVSS: 7.5 Published: 2008-10-03 Modified: 2026-06-16

Description

SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter.

Affected Platforms

Xoops XoopsRmsoft Minishop Module

Weakness Type

CWE-89

References