PT-2008-2238 · Xoops · Xoops

Alexandr Polyakov + 1 · Published 2008-02-06 · Updated 2018-10-15 · CVE-2008-0613

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XOOPS version 2.0.18

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved via a URL in the xoops redirect parameter in the htdocs/user.php file.

Recommendations For XOOPS version 2.0.18, update to a version that fixes this issue to prevent remote attackers from redirecting users to arbitrary web sites.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2008-0613

Affected Products

Xoops

References · 7

• 🔥 http://sourceforge.net/tracker/index.php?func=detail&atid=430840&aid=1881236&group_id=41586 · Exploit
• 🔥 https://exploit-db.com/exploits/5057 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0613 · Security Note
• http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1282 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0613 · Note
• http://securityreason.com/securityalert/3614 · Note
• http://securityfocus.com/archive/1/487484/100/0/threaded · Note