EUVD-2004-2032

Malware in sbrugna...

CVE-2004-2042

CVE-2004-2042: Affected software is e107 0.615. The vulnerability comprises multiple SQL injection flaws in content.php (parameters: content, content_id) and news.php (parameter: list). The underlying issue is improper input handling that allows remote attackers to inject arbitrary SQL and potent...

CVE-2004-2041

The vulnerability CVE-2004-2041 affects e107 0.615 via a PHP remote file inclusion in secure_img_render.php. An attacker can set the p parameter to a remote URL to cause the server to execute code, enabling arbitrary PHP execution. Impact is partial confidentiality, integrity, and availability ac...

CVE-2004-2042

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via 1 content parameter to content.php, 2 contentid parameter to content.php, or 3 list parameter to news.php...