Security Advisory
CVE-2014-3935
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter.