CVE-2021-27885

usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...

EUVD-2004-2253

Malware in sbrugna...

EUVD-2011-4856

Malware in sbrugna...

EUVD-2004-2031

Malware in sbrugna...

EUVD-2010-1021

Malware in sbrugna...

CVE-2018-16389

e107admin/banlist.php in e107 2.1.8 allows SQL injection via the oldip parameter...

Code injection

e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...

CVE-2018-11127

e107 2.1.7 has CSRF resulting in arbitrary user deletion...

e107 <= 2.1.4 keyword Blind SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/perl e107 = 2.1.4 "keyword" Blind SQL Injection Exploit -------------------------------------------------------------------------- Discovered by staker - stakerathotmaildotit Discovered on 09/03/2017 Site Vendor: http://www.e107.org...

CVE-2013-7305

fpw.php in e107 through 1.0.4 does not check the userban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user...

e107 0.7.23 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/43327/info e107 is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...

CVE-2006-2591

Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors related to an "emailing exploit"...

e107 0.617 - Cross-Site Scripting Remote Cookie Disclosure

/ 1 Change milw0rm.com to your domain.com 2 Post the below code into a new message. Credits to Nick Griffin. /str0ke /...