CVE-2017-11174

—

CVSS 3.0

9.8 critical

EPSS

1%p62

Published

Jul 12, 2017 (Jul 12, 2017)

Modified

Jun 17, 2026

Description

In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses.

Vendors: xoops
Products: xoops
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.