Test ID:	1.3.6.1.4.1.25623.1.0.108137
Category:	Web application abuses
Title:	XOOPS 'findusers.php' SQL Injection Vulnerability
Summary:	XOOPS is prone to an SQL injection vulnerability.
Description:	Summary: XOOPS is prone to an SQL injection vulnerability. Vulnerability Insight: The flaw exists due to XOOPS allowing remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses 'into outfile' to create a backdoor program. Vulnerability Impact: Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: XOOPS version prior to 2.5.8.1 Solution: Upgrade to XOOPS version 2.5.8.1 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7290 BugTraq ID: 97230 http://www.securityfocus.com/bid/97230 https://gist.github.com/jk1986/3b304ac6b4ae52ae667bba380c2dce19
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.