Sql injection

SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4785

CVE-2008-4785 affects the e107 CMS, specifically the alternate_profiles plugin’s newuser.php. The vulnerability is a SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Reported across multiple sources (NVD entries, OpenVAS, advisories) with a CVSS v2 ...