CoreCVE
Back

CRITICAL

In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses

Published Jul 12, 2017

Description

In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-89

SQL Injection

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 12, 2017
Updated Aug 5, 2024
Reserved Jul 11, 2017
Link CVE-2017-11174
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-11174
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-11174