Alexandre Amaral Xoops Celepar vulnerabilities
3 known vulnerabilities affecting alexandre_amaral/xoops_celepar.
Total CVEs
3
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2009-4698P3HIGHCVSS 7.5PoCv1.0.12010-03-15
CVE-2009-4698 [HIGH] CWE-89 CVE-2009-4698: Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote a
Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to (1) aviso.php and (2) imprimir.php, and the (3) cod_categoria parameter to categoria.php.
nvd
CVE-2009-4714P4MEDIUMCVSS 4.3PoCv1.0.12010-03-15
CVE-2009-4714 [MEDIUM] CWE-79 CVE-2009-4714: Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attacker
Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to cadastro_usuario.php.
nvd
CVE-2009-4713P4MEDIUMCVSS 4.3PoCv1.0.12010-03-15
CVE-2009-4713 [MEDIUM] CWE-79 CVE-2009-4713: Multiple cross-site scripting (XSS) vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar a
Multiple cross-site scripting (XSS) vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via (1) the cod_categoria parameter to categoria.php, (2) the opcao parameter to index.php, and the PATH_INFO to (3) categoria.php and (4) index.php.
nvd