CVE-2005-2113: SQL Injection
First published: Fri Jul 01 2005(Updated: )
SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| E-xoops | =2.0 | |
| E-xoops | =2.0.1 | |
| E-xoops | =2.0.2 | |
| E-xoops | =2.0.3 | |
| E-xoops | =2.0.4 | |
| E-xoops | =2.0.5 | |
| E-xoops | =2.0.5.1 | |
| E-xoops | =2.0.5.2 | |
| E-xoops | =2.0.6 | |
| E-xoops | =2.0.7 | |
| E-xoops | =2.0.9 | |
| E-xoops | =2.0.9.2 | |
| E-xoops | =2.0.9.3 | |
| E-xoops | =2.0.10 | |
| E-xoops | =2.0.11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2005-2113?
CVE-2005-2113 is classified as a critical severity vulnerability due to the potential for unauthorized access and arbitrary SQL command execution.
How do I fix CVE-2005-2113?
To fix CVE-2005-2113, you should upgrade to XOOPS version 2.0.12 or later which addresses this SQL injection vulnerability.
What versions of XOOPS are affected by CVE-2005-2113?
CVE-2005-2113 affects XOOPS versions 2.0.11 and earlier, including 2.0.10 and prior versions.
What type of vulnerability is CVE-2005-2113?
CVE-2005-2113 is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
Can CVE-2005-2113 lead to data breaches?
Yes, CVE-2005-2113 can potentially lead to data breaches by allowing attackers to bypass authentication and access sensitive information.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/remedy
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- agent/softwarecombine
- vendor/xoops
- canonical/e-xoops
- version/e-xoops/2.0
- version/e-xoops/2.0.1
- version/e-xoops/2.0.2
- version/e-xoops/2.0.3
- version/e-xoops/2.0.4
- version/e-xoops/2.0.5
- version/e-xoops/2.0.5.1
- version/e-xoops/2.0.5.2
- version/e-xoops/2.0.6
- version/e-xoops/2.0.7
- version/e-xoops/2.0.9
- version/e-xoops/2.0.9.2
- version/e-xoops/2.0.9.3
- version/e-xoops/2.0.10
- version/e-xoops/2.0.11