CVE-2011-4946

The CVE-2011-4946 entry documents an SQL injection in the e107 CMS before version 0.7.26. Specifically, the vulnerability exists in e107_admin/users_extended.php and allows remote attackers to inject SQL via the user_field parameter, enabling arbitrary SQL execution. The connected records confirm...