https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 18:38:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-280713 EUVD-2026-280713 https://cve.radiocsirt.org/vuln/euvd-2026-280713 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25433 <p>XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the gerar_pdf.php endpoint with malicious cid values to extract sensitive database information.</p> <p>XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the gerar_pdf.php endpoint with malicious cid values to extract sensitive database information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-25433 https://cve.radiocsirt.org/vuln/ghsa-87vp-v5jj-xmcq <p>XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the gerar_pdf.php endpoint with malicious cid values to extract sensitive database information.</p> <p>XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the gerar_pdf.php endpoint with malicious cid values to extract sensitive database information.</p> https://cve.radiocsirt.org/vuln/ghsa-87vp-v5jj-xmcq