SQL Injection Vulnerability in XOOPS Affecting Multiple Versions
CVE-2014-8999

Currently unrated

Key Information:

Vendor: Xoops
Status: Xoops
Vendor: CVE Published:; 20 November 2014

What is CVE-2014-8999?

An SQL injection vulnerability exists in htdocs/modules/system/admin.php in XOOPS, allowing remote authenticated users to execute arbitrary SQL commands through the selgroups parameter. This flaw can lead to unauthorized data manipulation and exposure, making it critical for system administrators to apply appropriate security measures and updates.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch