e107_2.1.9_CSRF_POC

e1072.1.9CSRFPOC CVE-2018-17081...

CVE-2023-43874-e107-CMS-Stored-XSS---MetaCustomTags

e107 CMS 格納型XSS v2.3.2 作成者: Sergio 説明: e017 CMS v.2.3.2 における複数のクロスサイトスクリプティング XSS の脆弱性により、ローカル攻撃者が Meta & Custom Tags メニューの Copyright フィールドと Author フィールドに細工したスクリプトを介して任意のコードを実行できる可能性があります。 攻撃ベクトル: スクリプティング 「Meta & Custom Tags メニュー」の Copyright フィールドと Author...

CVE-2023-43873-e107-CMS-Stored-XSS---Manage

e107 CMS Stored XSS v2.3.2 作成者: Sergio 説明: e017 CMS v.2.3.2 のクロスサイトスクリプティング（XSS）の脆弱性により、ローカルの攻撃者が「Manage」メニューの Name フィールドに細工したスクリプトを介して任意のコードを実行できる可能性があります。 攻撃ベクトル: スクリプティング — 「Manage」の Name に入力された値のサニタイズ処理に脆弱性があり、ユーザーが Web ページにアクセスしたときに実行される JavaScript コードを注入できます。 POC: パネルにログインしたら、General...

CVE-2025-61505

CVE-2025-61505 – e107 CMS 2.x における PHP オブジェクトインジェクション 報告日: 2025年9月18日 CVE 割り当て日: 2025年10月9日 公開日: 2026年2月2日 CVE ID: CVE-2025-61505 発見者: Anas Abderrahman Benbarek 概要 e107 CMS バージョン 2.3.3 のインストールスクリプト install.php において、PHP オブジェクトインジェクションの脆弱性 CWE-502: 信頼できないデータのデシリアライゼーション が発見されました。...

CVE-2026-72599

An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, modify, or delete all database contents...

CVE-2026-72599 e107 e107 - SQL Injection

An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, modify, or delete all database contents...

CVE-2026-72599

Summary: CVE-2026-72599 affects e107 2.4.0 and is an SQL injection in the news item page ID parameter. The parameter is concatenated into a SQL WHERE clause without escaping, enabling unauthenticated remote attackers to read, modify, or delete all database contents (including administrator creden...

CVE-2026-72599

An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, modify, or delete all database contents...

EUVD-2026-56038

An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, modify, or delete all database contents...

CVE-2026-72599 e107 e107 - SQL Injection

An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, modify, or delete all database contents...

PT-2026-70143

Name of the Vulnerable Software and Affected Versions e107 version 2.4.0 Description An SQL injection allows unauthenticated remote attackers to execute arbitrary SQL commands. This occurs because the news item page ID parameter is concatenated directly into a SQL WHERE clause without proper...

CVE-2026-72599: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, modify, or delete all database contents...

CVE-2026-57859

e107 prior to version 2.3.8 contains a code execution vulnerability in the earray deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the userprefs column. The earray::unserialize function in...

EUVD-2026-51123

e107 prior to version 2.3.8 contains a code execution vulnerability in the earray deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the userprefs column. The earray::unserialize function in...

CVE-2026-57859 e107 Second-Order Code Execution via eval()-Based Deserialization in e_array::unserialize()

e107 prior to version 2.3.8 contains a code execution vulnerability in the earray deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the userprefs column. The earray::unserialize function in...

CVE-2026-57859

Summary of CVE-2026-57859 : In e107 prior to version 2.3.8, a code execution vulnerability exists in the e_array deserialization handler. The e_array::unserialize() function only checks for the prefix 'array' before passing the stored value to eval(), allowing an attacker with out-of-band databas...

CVE-2026-57859

e107 prior to version 2.3.8 contains a code execution vulnerability in the earray deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the userprefs column. The earray::unserialize function in...

CVE-2026-57859 e107 Second-Order Code Execution via eval()-Based Deserialization in e_array::unserialize()

e107 prior to version 2.3.8 contains a code execution vulnerability in the earray deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the userprefs column. The earray::unserialize function in...

CVE-2026-57859 e107 Second-Order Code Execution via eval()-Based Deserialization in e_array::unserialize()

e107 prior to version 2.3.8 contains a code execution vulnerability in the earray deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the userprefs column. The earray::unserialize function in...

CVE-2026-57859: Deserialization of Untrusted Data

e107 prior to version 2.3.8 contains a code execution vulnerability in the earray deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the userprefs column. The earray::unserialize function in...