XOOPS Versions Prior to 2.4.0 Multiple Unspecified Vulnerabilities

Bugtraq ID:	36955
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 09 2009 12:00AM
Updated:	Nov 10 2009 08:16PM
Credit:	XOOPS
Vulnerable:	Xoops Xoops 2.3.3 Xoops Xoops 2.3.2 b Xoops Xoops 2.3.2 Xoops Xoops 2.2.5 Xoops Xoops 2.2.3 RC1 Xoops Xoops 2.2.3 Xoops Xoops 2.2.1 Xoops Xoops 2.0.18 .1 Xoops Xoops 2.0.18 Xoops Xoops 2.0.17 1 Xoops Xoops 2.0.15 Xoops Xoops 2.0.14 Xoops Xoops 2.0.13 .2 Xoops Xoops 2.0.13 .1 Xoops Xoops 2.0.12 a Xoops Xoops 2.0.12 Xoops Xoops 2.0.11 Xoops Xoops 2.0.10 Xoops Xoops 2.0.9 .3 Xoops Xoops 2.0.9 .2 Xoops Xoops 2.0.5 .2 Xoops Xoops 2.0.5 .1 Xoops Xoops 2.0.5 Xoops Xoops 2.0.3 Xoops Xoops 2.0.2 Xoops Xoops 2.0.1 Xoops Xoops 2.0 Xoops Xoops 2.3 Xoops Xoops 2.0.16 core
Not Vulnerable:	Xoops Xoops 2.4

XOOPS Versions Prior to 2.4.0 Multiple Unspecified Vulnerabilities

XOOPS is prone to multiple unspecified vulnerabilities.

Very few details are currently available regarding these issues. We will update this BID as more information emerges.

Versions prior to XOOPS 2.4.0 are vulnerable.

XOOPS Versions Prior to 2.4.0 Multiple Unspecified Vulnerabilities

Given the nature of the software, attackers will likely use a browser to exploit these issues.

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

XOOPS Versions Prior to 2.4.0 Multiple Unspecified Vulnerabilities

Solution:
An update is available. Please see the references for details.

XOOPS Versions Prior to 2.4.0 Multiple Unspecified Vulnerabilities

References:

• XOOPS 2.4.0 FINAL Is Released (Xoops)
  
• Xoops Homepage (Xoops)