981 matches found
e107 2.1.4 - keyword Blind SQL Injection
e107 2.1.4 - keyword Blind SQL Injection !/usr/bin/perl e107 = 2.1.4 "keyword" Blind SQL Injection Exploit -------------------------------------------------------------------------- Discovered by staker - stakerathotmaildotit Discovered on 09/03/2017 Site Vendor: http://www.e107.org BUG: Blind SQ...
e107 < 2.1.4 - 'keyword' Blind SQL Injection
!/usr/bin/perl e107 = 2.1.4 "keyword" Blind SQL Injection Exploit -------------------------------------------------------------------------- Discovered by staker - stakerathotmaildotit Discovered on 09/03/2017 Site Vendor: http://www.e107.org BUG: Blind SQL Injection...
e107 CMS is less than or equal to 2. 1. 2 elevation of privilege vulnerability analysis-vulnerability warning-the black bar safety net
0x00 vulnerability background e107 CMS is a based on PHP, Bootstrap, Mysql, web site content management system, can be widely used for personal blogs, enterprise built station, in the global range more widely. 0x01 vulnerability affects version version 0x02 vulnerability analysis of the environme...
e107 2.1.2: SQL Injection through Object Injection
RIPS Analysis The e107 CMS consists of 317,356 lines of code and was analyzed in about 2 minutes. Many of the vulnerabilities found by RIPS are exploitable, despite a few exceptions. The main reason for this is that e107 contains a lot of unused code from previous releases and thus not all affect...
e107 2.1.2 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities
Exploit for php platform in category web applications e107 Content Management System CMS - Multiple Issues Affected Versions ================= e107 2.1.2 Bootstrap CMS Issue Overview ============== Vulnerability Type: Multiple Vulnerabilities Technical Risk: medium Likelihood of Exploitation:...
e107 2.1.2 Cross Site Request Forgery / Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 === FOXMOLE - Security Advisory 2016-05-02 === e107 Content Management System CMS - Multiple Issues Affected Versions ================= e107 2.1.2 Bootstrap CMS Issue Overview ============== Vulnerability Type: Multiple Vulnerabilities Technical Ris...
e107 CMS Elevation of Privilege Vulnerability
E107 is an open source, free and based on PHP and MySQL content management system CMS of the United States E107 company. The system supports a variety of plug-in programs and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. An elevati...
e107 CMS-2.1.1 privilege elevation vulnerability
No description provided by source. $login, 'userpass' = $pass, 'userlogin' = 'Sign In'; curlsetopt$ch, CURLOPTPOST, 1; $content = curlexec$ch; if strpos$content, '?logout' === false die"Cannot login"; $data = array; $data'useradmin' = 1; $data'userperms' = 0; $data'userpassword' = md5$pass;...
e107 CMS 2.1.2 Privilege Escalation Vulnerability
Exploit for php platform in category web applications Exploit Title: e107 CMS 2.1.2 Privilege Escalation Date: 09-11-2016 Software Link: http://e107.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Dat...
e107 CMS 2.1.2 Privilege Escalation
Exploit Title: e107 CMS 2.1.2 Privilege Escalation Date: 09-11-2016 Software Link: http://e107.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Datas from $POST'updateddata' inside usersettings.php are...
e107 CMS 2.1.2 - Privilege Escalation
e107 CMS 2.1.2 - Privilege Escalation Exploit Title: e107 CMS 2.1.2 Privilege Escalation Date: 09-11-2016 Software Link: http://e107.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Datas from...
e107 CMS 2.1.2 - Privilege Escalation
Exploit Title: e107 CMS 2.1.2 Privilege Escalation Date: 09-11-2016 Software Link: http://e107.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Datas from $POST'updateddata' inside usersettings.php are...
CVE-2015-1057
Cross-site scripting XSS vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the "Real Name" value...
Cross site scripting
Cross-site scripting XSS vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the "Real Name" value...
CVE-2015-1057
Cross-site scripting XSS vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the "Real Name" value...
CVE-2015-1057
The vulnerability CVE-2015-1057 is an XSS issue in e107 2.0.0, affecting usersettings.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the Real Name field, enabling possible script execution in the user’s context. The connected sources confirm the affected product/...
CVE-2015-1041
Cross-site scripting XSS vulnerability in e107admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107files/ file path in the QUERYSTRING...
Cross site scripting
Cross-site scripting XSS vulnerability in e107admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107files/ file path in the QUERYSTRING...
CVE-2015-1041
CVE-2015-1041 Affect: e107 CMS, version 1.0.4. Issue: Cross-site scripting (XSS) in e107_admin/filemanager.php allows remote attackers to inject arbitrary web script/HTML via the e107_files/ path in the QUERY_STRING. Root cause: insufficient input validation/escaping of the file path parameter. I...