AI Score
Confidence
Low
EPSS
Percentile
40.7%
e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC.
blog.ripstech.com/2016/e107-sql-injection-through-object-injection/
demo.ripstech.com/projects/e107_2.1.2