CVE-2005-2113

SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL…

published July 1, 2005

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01247 · 69.1th percentile
Published
2005-07-01T04:00Z
EPSS history
Timeline
  • 01 JUL 04:00Z
    SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL…
    cvelistv5