CVE-2008-1351

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-03-17 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php.

Affected products

Xoops Tutoriais Module: 2.1b

References

http://secunia.com/advisories/29358
http://www.securityfocus.com/bid/28230
https://www.exploit-db.com/exploits/5245
http://secunia.com/advisories/29358
http://www.securityfocus.com/bid/28230
https://www.exploit-db.com/exploits/5245

Get alerted when CVE-2008-1351 or the next vulnerability affects your stack