CVE-2002-0216: Xoops

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.

Affected products

• Xoops Xoops: version 1.0_rc1 only

Published 2002-05-16. Last modified 2026-06-16.