CVE-2002-0216

userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.

Date published : 2002-05-03

http://www.securityfocus.com/bid/3977

http://online.securityfocus.com/archive/1/252827