1097 matches found
CVE-2018-16389
CVE-2018-16389 affects e107 2.1.8 where e107_admin/banlist.php accepts the old_ip parameter, enabling SQL injection. This is documented across multiple sources (NVD entry: SQL injection via old_ip; CNVD/CPE notes also describe the same vulnerability). No exploitation details are provided in the c...
CVE-2018-16388
CVE-2018-16388 affects e107 CMS, version 2.1.8. The issue is in e107_web/js/plupload/upload.php : a remote attacker can upload a file named with a .php extension but with an image/jpeg content type, leading to arbitrary PHP code execution . The CVSS metrics in the documents indicate a high impact...
CVE-2018-16388: Unrestricted Upload of File with Dangerous Type
e107web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content type...
CVE-2018-16389: Improper Neutralization of Special Elements used in an SQL Command
e107admin/banlist.php in e107 2.1.8 allows SQL injection via the oldip parameter...
e107 <= 2.1.8 Multiple Vulnerabilities
E107 is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...
CVE-2018-16381
e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...
CVE-2018-16381
e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...
Code injection
e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...
CVE-2018-16381
CVE-2018-16381 affects e107 2.1.8 with an XSS vulnerability in the e107_admin/users.php?mode=main&action=list user_loginname parameter. The connected documents reference this CVE in unrelated packages (e.g., php5-smarty3/OpenSUSE security updates and OpenVAS listings) but do not provide additiona...
CVE-2018-16381
e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...
CVE-2018-16381: Improper Neutralization of Input During Web Page Generation
e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...
e107 Cross-Site Request Forgery Vulnerability (CNVD-2018-17620)
e107 is an open source, free and PHP and MySQL based Content Management System CMS developed by the e107 team. The system supports a variety of plug-ins and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. A cross-site request forgery...
CVE-2018-15901
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...
CVE-2018-15901
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...
Cross site request forgery (csrf)
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...
CVE-2018-15901
The CVE-2018-15901 entry concerns e107 2.1.8, where a CSRF flaw in usersettings.php allows altering user details, including administrator passwords. The vulnerability’s root cause is improper CSRF protection in the usersettings.php workflow, enabling unauthorized changes without user interaction....
CVE-2018-15901
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...
CVE-2018-15901: Cross-Site Request Forgery (CSRF)
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...
e107 < 2.1.8 CSRF Vulnerability
e107 is prone to a CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.113187";...