e107 1.0.2 - CSRF Resulting in SQL Injection

No description provided by source. Exploit Title: e107 v1.0.2 Administrator CSRF Resulting in SQL Injection Google Dork: intext:This site is powered by e107 Date: 01/01/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://e107.org Software Link:...

CVE-2012-6434

CVE-2012-6434 affects e107 1.0.2: CSRF in e107_admin/download.php enables an attacker to hijack administrator sessions and perform SQL injection via parameters such as download_url, download_url_extended, download_author_email, download_author_website, download_image, download_thumb, download_vis...

CVE-2012-6434

creationtimestamp| type| source ---|---|--- 2013-01-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23829...