CVE-2005-4052

CVE-2005-4052 affects e107 0.6174. The vulnerability arises in rate.php: the download parameter is used after a file download rating, enabling remote attackers to redirect users to arbitrary sites. The default installation reportedly mitigates this via the e_BASE check, restricting redirects to t...

CVE-2005-4051

The CVE-2005-4051 entry concerns e107 version 0.6174, where remote attackers can abuse the rating mechanism to vote multiple times for a download by issuing repeated requests to rate.php. This describes a vulnerability in the download rating feature that enables repeated submissions, but the prov...