Date: 06/29/06 (Java Web)    Keywords: php, sql

KeyCoder has discovered a vulnerability in the MyAds module for Xoops, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to the “lid” parameter in annonces-p-f.php isn’t properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. The vulnerability has [...]

Source: http://blog.taragana.com/index.php/archive/xoops-cms-sql-injection-vulnerability-reported/