medium5.0
CVE-2002-0216
userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.
Impact
userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xoops | Xoops | Version 1.0_rc1 |