1. CVE-Search
  2. CVE-2005-2113
ID CVE-2005-2113
Summary SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method.
References
Vulnerable Configurations
  • cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:xoops:xoops:2.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:xoops:xoops:2.0.11:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 18-10-2016 - 03:25)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bugtraq 20050629 XOOPS 2.0.11 && Earlier Multiple Vulnerabilities
confirm http://www.xoops.org/modules/news/article.php?storyid=2383
misc http://www.gulftech.org/?node=research&article_id=00086-06292005
secunia 15843
Last major update 18-10-2016 - 03:25
Published 05-07-2005 - 04:00
Last modified 18-10-2016 - 03:25
Back to Top