← Database

CVE-2009-4360

HIGH CVSS: 7.5 Published: 2009-12-20 Modified: 2026-06-16

Description

SQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected Platforms

Handcoders Content ModuleXoops Xoops

Weakness Type

CWE-89

References