CVE-2014-3935

SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter.

Date published : 2014-06-02

http://www.securityfocus.com/bid/67460

http://packetstormsecurity.com/files/126701