VendorsRIKENxoonipsall versions
Vulnerabilities

RIKEN BSI Neuroinformatics Japan Center XooNIps module for XOOPS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2020-5664
Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecified vectors.
Published 2020-11-16 · Modified
9.8EPSS 0.027
CVE-2020-5624
SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published 2020-08-28 · Modified
9.8EPSS 0.014
CVE-2020-5659
SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Published 2020-11-16 · Modified
8.8EPSS 0.012
CVE-2020-5625
Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
Published 2020-08-28 · Modified
6.1EPSS 0.010
CVE-2020-5662
Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors.
Published 2020-11-16 · Modified
5.4EPSS 0.008
CVE-2020-5663
Stored cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors.
Published 2020-11-16 · Modified
5.4EPSS 0.007
CVE-2014-1968
Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2014-02-27 · Modified
4.3EPSS 0.012