CVE-2026-14642 SourceCodester Class and Exam Timetabling System edit_class2.php sql injection

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /editclass2.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is...

e107 Website System 0.554 HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8279/info The e107 content management system is prone to an HTML injection vulnerability. This issue is exposed through the class2.php script. An attacker may exploit this issue by including hostile HTML and script code i...

PHP 4.x/5.0.x File Upload GLOBAL Variable Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15250/info PHP is prone to a vulnerability that allows attackers to overwrite the GLOBAL variable via HTTP POST requests. By exploiting this issue, remote attackers may be able to overwrite the GLOBAL variable. This may...

CVE-2006-5786: Undefined Security Weakness

Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PHP code in arbitrary files via ".." sequences in the e107languagee107cookie cookie to gsitemap.php...

e107-GLOBALS-php.txt

!/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- e107 = 0.75 GLOBALS overwrite/ZendHashDelKeyOrIndex remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork: "This site is...

e107 <= 0.75 (GLOBALS Overwrite) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================== e107 = 0.75 GLOBALS Overwrite Remote Code Execution Exploit ============================================================== !/usr/bin/php -q -d shortopentag=on ? printr'...

CVE-2006-2416: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref'cookiename'...

e107 Website System 0.554 - HTML Injection

e107 Website System 0.554 - HTML Injection source: https://www.securityfocus.com/bid/8279/info The e107 content management system is prone to an HTML injection vulnerability. This issue is exposed through the class2.php script. An attacker may exploit this issue by including hostile HTML and scri...

e107 Website System 0.554 - HTML Injection

source: https://www.securityfocus.com/bid/8279/info The e107 content management system is prone to an HTML injection vulnerability. This issue is exposed through the class2.php script. An attacker may exploit this issue by including hostile HTML and script code in certain fields within the form...