CVE-2011-4921

The CVE-2011-4921 entry describes a SQL injection in e107:9 usersettings.php affecting e107 0.7.26 and possibly earlier versions before 1.0.0. The flaw allows remote attackers to execute arbitrary SQL commands via the username parameter. Connected sources corroborate the vulnerability but do not ...