Test ID:	1.3.6.1.4.1.25623.1.0.800777
Category:	Web application abuses
Title:	XOOPS Profiles Module Activation Security Bypass Vulnerability
Summary:	XOOPS is prone to a security bypass vulnerability.
Description:	Summary: XOOPS is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists due to the error in the 'activate.php' script which does not verify the activation type when resending the activation email. Vulnerability Impact: Successful exploitation will allow remote attackers to activate their accounts without requiring approval from the administrator. Affected Software/OS: XOOPS version prior to 2.4.1 Solution: Upgrade to the XOOPS version 2.4.1. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4851 http://www.xoops.org/modules/newbb/viewtopic.php?post_id=319132 http://secunia.com/advisories/37274 http://www.vupen.com/english/advisories/2009/3256
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.