CVE-2006-2416

CVE-2006-2416 affects e107 0.7.2 and earlier. The vulnerability originates from SQL injection in class2.php via the application cookie named in $pref['cookie_name'], allowing remote attackers to execute arbitrary SQL commands. Exploitation is described as remote and unauthenticated in public sour...