CVE-2005-2113

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-07-05 · updated 2026-06-16

Description

SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method.

Affected products

Xoops: 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 (+9)

References

http://marc.info/?l=bugtraq&m=112006318512991&w=2
http://secunia.com/advisories/15843
http://www.gulftech.org/?node=research&article_id=00086-06292005
http://www.xoops.org/modules/news/article.php?storyid=2383
http://marc.info/?l=bugtraq&m=112006318512991&w=2
http://secunia.com/advisories/15843
http://www.gulftech.org/?node=research&article_id=00086-06292005
http://www.xoops.org/modules/news/article.php?storyid=2383

Get alerted when CVE-2005-2113 or the next vulnerability affects your stack