976 matches found
CVE-2018-16381
e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...
Code injection
e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...
CVE-2018-16381
e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...
CVE-2018-16381
CVE-2018-16381 affects e107 2.1.8 with an XSS vulnerability in the e107_admin/users.php?mode=main&action=list user_loginname parameter. The connected documents reference this CVE in unrelated packages (e.g., php5-smarty3/OpenSUSE security updates and OpenVAS listings) but do not provide additiona...
e107 Cross-Site Request Forgery Vulnerability (CNVD-2018-17620)
e107 is an open source, free and PHP and MySQL based Content Management System CMS developed by the e107 team. The system supports a variety of plug-ins and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. A cross-site request forgery...
CVE-2018-15901
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...
CVE-2018-15901
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...
Cross site request forgery (csrf)
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...
CVE-2018-15901
The CVE-2018-15901 entry concerns e107 2.1.8, where a CSRF flaw in usersettings.php allows altering user details, including administrator passwords. The vulnerability’s root cause is improper CSRF protection in the usersettings.php workflow, enabling unauthorized changes without user interaction....
CVE-2018-15901
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...
e107 < 2.1.8 CSRF Vulnerability
e107 is prone to a CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.113187";...
CVE-2018-11127
e107 2.1.7 has CSRF resulting in arbitrary user deletion...
Cross site request forgery (csrf)
e107 2.1.7 has CSRF resulting in arbitrary user deletion...
CVE-2018-11127
e107 2.1.7 has CSRF resulting in arbitrary user deletion...
CVE-2018-11127
CVE-2018-11127 pertains to the e107 CMS, targetting version 2.1.7. The issue is a Cross-Site Request Forgery (CSRF) that allows arbitrary user deletion. Root cause and impact are documented across multiple sources (including Red Hat and CNVD). According to CVSS, the vulnerability is network-expos...
CVE-2018-11127
e107 2.1.7 has CSRF resulting in arbitrary user deletion...
e107 v2 Bootstrap CMS - CSRF Web Vulnerability
Document Title: =============== e107 v2 Bootstrap CMS - CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2083 Release Date: ============= 2017-07-05 Vulnerability Laboratory ID VL-ID: ==================================== 2083 Commo...
e107 v2 Bootstrap CMS - Cross Site Scripting Vulnerability
Document Title: =============== e107 v2 Bootstrap CMS - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2082 Release Date: ============= 2017-07-03 Vulnerability Laboratory ID VL-ID: ===================================...
e107 SQL Injection Vulnerability (CNVD-2017-10152)
e107 is an open source, free and PHP and MySQL based Content Management System CMS developed by e107 team. The system supports a variety of plug-in programs and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. A SQL injection...