Xoops Cross-Site Scripting and SQL Injection Vulnerabilities

[niall]

1) Input passed to the "order" parameter in "edit.php" and the "cid" parameter in "comment_edit.php" isn't properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) Some input passed via the XML-RPC interface isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerabilities have been reported in version 2.0.11 and prior.

Solution:
Update to version 2.0.12a.