CVE-2009-4698

no score yetEPSS 1.7%

Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to (1) aviso.php and (2) imprimir.php, and the (3) cod_categoria parameter to categoria.php.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-03-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

alexandre_amaral:xoops_celepar

References

http://osvdb.org/56593
http://osvdb.org/56595
http://secunia.com/advisories/35966
http://www.exploit-db.com/exploits/9249
http://www.exploit-db.com/exploits/9261

Check your stack JSON