← Database

CVE-2009-4582

HIGH CVSS: 7.5 Published: 2010-01-06 Modified: 2026-06-16

Description

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms

Xoops Xoops Dictionary

Weakness Type

CWE-89

References