Vulnerabilities

TI-2008-04227 CVE-2008-4433 · GHSA-rj33-4rp2-f824

SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops…

LOW 35

SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01001 Published 2008-10-03 No fix listed CWE-89

TI-2008-04226 CVE-2008-4432 · GHSA-gwc8-4x3p-h96j

Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0…

LOW 23

Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2008-10-03 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops…

Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0…