e107 2 Bootstrap CMS - Cross-Site Scripting

| | | || / | |/' | | || | / / | /| \ / /\ | / / \ |/ / alertString.fromCharCode88, 83, 83 or "alertdocument.cookie ======== Credits: ======== Vulnerability found and advisory written by Ahmet Agar. =========== References: =========== http://www.0x97.info htts://twitter.com/HacKingZ...

e107 2 Bootstrap CMS - XSS Vulnerability

Exploit for php platform in category web applications | | | || / | |/' | | || | / / | /| \ / /\ | / / \ |/ / alertString.fromCharCode88, 83, 83 or "alertdocument.cookie ======== Credits: ======== Vulnerability found and advisory written by Ahmet Agar. =========== References: ===========...

CVE-2014-9459

Cross-site request forgery CSRF vulnerability in the AdminObserver function in e107admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the AdminObserver function in e107admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action...

CVE-2014-9459

Cross-site request forgery CSRF vulnerability in the AdminObserver function in e107admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action...

CVE-2014-9459

Summary of CVE-2014-9459 (e107 CMS) : A CSRF vulnerability in the AdminObserver function of e107(2.0 alpha2) affects e107_admin/users.php, allowing a remote attacker to hijack administrator authentication by tricking a logged-in admin into performing an action that adds a user to the administrato...

e107 2.0 Alpha2 Cross Site Request Forgery Vulnerability

e107 version 2.0 Alpha2 suffers from a cross site request forgery vulnerability. Advisory: CSRF vulnerability in CMS e107 v.2 alpha2 Author: Steffen Rösemann Affected Software: CMS e107 v.2 alpha2 Release-Date: 08th-Jun-2014 Vendor URL: http://e107.org Vendor Status: solved CVE-ID: -...

e107 2.0 Alpha2 Cross Site Request Forgery

Advisory: CSRF vulnerability in CMS e107 v.2 alpha2 Advisory ID: SROEADV-2014-04 Author: Steffen Rösemann Affected Software: CMS e107 v.2 alpha2 Release-Date: 08th-Jun-2014 Vendor URL: http://e107.org Vendor Status: solved CVE-ID: - ========================== Vulnerability Description:...

E107 contact php Code Execution (CVE-2010-2099)

Code Execution vulnerability has been reported in E107 contact.php. Successful exploitation of this vulnerability would allow a remote attacker to execute a local code...

E107 userjournals_menu Plugin SQL Injection

An SQL injection vulnerability has been reported in E107 Userjournals Menu Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

E107 EasyShop Plugin SQL Injection (CVE-2008-4786)

An SQL injection vulnerability has been reported in E107 Easyshop Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

E107 lyrics_menu Plugin SQL Injection (CVE-2008-4906)

An SQL injection vulnerability has been reported in e107 lyricsmenu Plugin. An attacker could exploit this vulnerability via the lid parameter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

E107 alternate_profiles Plugin SQL Injection (CVE-2008-4785)

An SQL injection vulnerability has been reported in E107 Alternate Profiles Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

E107 BLOG Engine Plugin SQL Injection (CVE-2008-2455)

An SQL injection vulnerability has been reported in E107coders E107 Blog Engine. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

E107 My_Gallery Plugin Absolute Path Traversal (CVE-2008-1702)

A directory traversal vulnerability has been reported in E107 My Gallery. An attacker could exploit this vulnerability via a full pathname in the file parameter. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Reflected Cross-Site Scripting (XSS) in e107

Advisory ID: HTB23220 Product: e107 Vendor: e107 Vulnerable Versions: 2.0 alpha2 and probably prior Tested Version: 2.0 alpha2 Advisory Publication: June 18, 2014 without technical details Vendor Notification: June 18, 2014 Vendor Patch: June 27, 2014 Public Disclosure: July 16, 2014 Vulnerabilit...

CVE-2014-4734

Cross-site scripting XSS vulnerability in e107admin/db.php in e107 2.0 alpha2 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in e107admin/db.php in e107 2.0 alpha2 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

CVE-2014-4734

Cross-site scripting XSS vulnerability in e107admin/db.php in e107 2.0 alpha2 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

CVE-2014-4734

CVE-2014-4734 affects the e107 CMS, specifically the function in e107_admin/db.php . The vulnerability is a reflected Cross‑Site Scripting (XSS) via the HTTP GET parameter type , allowing a remote attacker to inject arbitrary HTML/JavaScript and potentially hijack an administrator’s session after...