VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 12, 2017· Updated Jun 17, 2026

CVE-2017-11174

CVE-2017-11174

Description

In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • XOOPS/Xoops2 versions
    cpe:2.3:a:xoops:xoops:2.5.8.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:xoops:xoops:2.5.8.1:*:*:*:*:*:*:*
    • (no CPE)range: = 2.5.8.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.