CVE-2020-5659

XOOPS 用モジュール XooNIps における SQL インジェクション

XooNIps 3.49 and earlier was affected by SQL Injection. This allows remote attackers to obtain / modify information in the database.

Disclosure Date

2020/11/06

Credit

stypr (@stereotype32)

CWE

• CWE-89

Product URLs

• https://xoonips.osdn.jp/

Reference

• https://nvd.nist.gov/vuln/detail/CVE-2020-5659
• https://jvn.jp/vu/JVNVU92053563/index.html
• https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13