CVE-2005-0743

Published: May 2, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.

Affected (17)

Products: Xoops: Xoops

Xoops

1 product

Xoops

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Xoops Xoops	Version 1.0_rc1
Xoops Xoops	Version 1.0_rc3.0.5
Xoops Xoops	Version 1.0_rc3
Xoops Xoops	Version 1.3.10
Xoops Xoops	Version 1.3.5
Xoops Xoops	Version 1.3.6
Xoops Xoops	Version 1.3.7
Xoops Xoops	Version 1.3.8
Xoops Xoops	Version 1.3.9
Xoops Xoops	Version 2.0.1
Xoops Xoops	Version 2.0.2
Xoops Xoops	Version 2.0.3
Xoops Xoops	Version 2.0.5.1
Xoops Xoops	Version 2.0.5.2
Xoops Xoops	Version 2.0.5
Xoops Xoops	Version 2.0.9.2
Xoops Xoops	Version 2.0