Cross site scripting

In e107 v2.1.7, output without filtering results in XSS...

CVE-2018-11734

Affected software: e107 v2.1.7. Vulnerability: cross-site scripting due to output without filtering. Root cause: lack of proper validation of client-side data in the WEB application (per CNVD/CVE sources). Impact: client-side code execution. Remediation: not specified in provided documents.

CVE-2018-11734

In e107 v2.1.7, output without filtering results in XSS...

e107_admin/comment.php file cross-site scripting vulnerability

e107 is an open source, free and PHP and MySQL based Content Management System CMS from the e107 team. A cross-site scripting vulnerability exists in the e107admin/comment.php file in e107 v2.1.9. The vulnerability stems from the WEB application lacking proper validation of client-side data. An...

e107 <= 2.2.1 XSS Vulnerability

e107 is prone to a cross-site scripting XSS vulnerability via e107admin/comment.php. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2018-17423

An issue was discovered in e107 v2.1.9. There is a XSS attack on e107admin/comment.php...

CVE-2018-17423

An issue was discovered in e107 v2.1.9. There is a XSS attack on e107admin/comment.php...

Design/Logic Flaw

An issue was discovered in e107 v2.1.9. There is a XSS attack on e107admin/comment.php...

CVE-2018-17423

An issue was discovered in e107 v2.1.9. There is a XSS attack on e107admin/comment.php...

CVE-2018-17423

CVE-2018-17423 affects e107 v2.1.9 with a cross-site scripting (XSS) vulnerability in e107_admin/comment.php due to improper validation of client-side data. Documents from NVD, Red Hat, CNVD, OSV, OpenVAS and others corroborate the XSS flaw; exploitation details or fixes are not provided in the a...

e107 < 2.1.3 SQL Injection Vulnerability

e107 is prone to an SQL injection vulnerability through object injection. Copyright C 2019 Greenbone Networks GmbH, https://www.greenbone.net SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

Sql injection

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...

CVE-2016-10753

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...

CVE-2016-10753

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...

CVE-2016-10753

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...

CVE-2016-10753

CVE-2016-10753 affects e107 2.1.2. It enables a PHP Object Injection vulnerability via usersettings.php that calls unserialize without an HMAC, which leads to a subsequent SQL injection. The root cause is improper handling of unserialize data, enabling an attacker-controlled object to affect data...

PHP imap_open - Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'php imapopen Remote Code Execution', 'Description' = %q The imapopen function within php, if called without the /norsh flag, will attempt to...

PHP imap_open Remote Code Execution Exploit

The imapopen function within PHP, if called without the /norsh flag, will attempt to preauthenticate an IMAP session. On Debian based systems, including Ubuntu, rsh is mapped to the ssh binary. Ssh's ProxyCommand option can be passed from imapopen to execute arbitrary commands. While many custom...

PHP imap_open Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'php imapopen Remote Code Execution', 'Description' = %q The imapopen function within php, if called without the /norsh flag, will attempt to...

php imap_open Remote Code Execution

The imapopen function within php, if called without the /norsh flag, will attempt to preauthenticate an IMAP session. On Debian based systems, including Ubuntu, rsh is mapped to the ssh binary. Ssh's ProxyCommand option can be passed from imapopen to execute arbitrary commands. While many custom...