CVE-2008-0613: Xoops

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the xoops_redirect parameter.

Affected products

• Xoops Xoops: version 2.0.18 only

Published 2008-02-06. Last modified 2026-06-16.