CVE-2008-0937: SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote...

Security readout for executives and security teams

This CVE describes a SQL injection flaw in the Tiny Event 1.01 module for XOOPS. A remote attacker could manipulate the print action’s id parameter to run unintended database queries. Business impact depends on whether this old module is still deployed and what data its database account can access. Exposure is likely limited to internet-facing or internally reachable XOOPS sites running the Tiny Event 1.01 module. The bundle’s affected-product metadata is incomplete, so confirm by inventory rather than product feeds alone. Prioritize confirmation if any XOOPS estate remains active. If Tiny Event 1.01 is present on reachable systems, treat remediation as urgent because the stated impact includes arbitrary SQL execution. Mitigation focus: Inventory XOOPS deployments for the Tiny Event 1.01 module.; Check the referenced advisories and vendor guidance for any patch or replacement.; Disable or remove Tiny Event 1.01 where it is not required..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.