1144 matches found
E107 Website System 0.7.2 Chatbox Plugin HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16719/info The e107 content management system CMS Chatbox Plugin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in...
e107 0.7.21 full Mullti (RFI/XSS) Vulnerabilities
No description provided by source...
e107 0.7.x 'e107_admin/banner.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39609/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
e107 0.7.5 Subject field HTML injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18560/info The e107 CMS is prone to an HTML-injection vulnerability. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site whe...
e107 <= 0.7.8 - (photograph) Arbitrary File Upload Vulnerability
No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title e107 = 0.7.8 - Arbitrary File Upload Description e107 is a content management system written in PHP and using the...
e107 1.0.2 - CSRF Resulting in SQL Injection
No description provided by source. Exploit Title: e107 v1.0.2 Administrator CSRF Resulting in SQL Injection Google Dork: intext:This site is powered by e107 Date: 01/01/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://e107.org Software Link:...
e107 CMS <= 0.7.19 CSRF Vulnerability
No description provided by source. Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site...
e107 Plugin BLOG Engine 2.1.4 - Remote SQL Injection Vulnerability
No description provided by source. e107 Plugin macgurublogmenu macgurublog.php uid Remote Sql inj author: ZoRLu home: z0rlu.blogspot.com concat: [email protected] date: 28/10/2008 n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA : n0te: a.q kpss : dork: allinurl:macgurublog.php?uid= exploit:...
e107 website system 0.7.5 download.php Query String (PATH_INFO) Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue to have arbitrary script code execute in the...
e107 Website System 0.617 Forum_viewforum.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13576/info e107 Website System is prone to an SQL injection vulnerability. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other...
e107 module 123 flash chat 6.8.0 - Remote File Inclusion Vulnerability
No description provided by source. E107 Chat Module 123FlashChat Remote File Inclusion Vulnerability AUTHOR : bycasper41 Mekan : Cyber-Warrior.Org MAİL : [email protected] Download: http://www.123flashchat.com/download/e107modfor123flashchat6.8.0.zip DORKS : 123flashchat.php EXPLOITS :...
e107 <= 0.7.13 - (usersettings.php) Blind SQL Injection Exploit
No description provided by source. Author: GiReX Homepage: http://girex.altervista.org Date: 19/10/2008 CMS: e107 URL: http://e107.org/ Note: Works regardless of php.ini settings magicquotes, registerglobals.. Attenction: This exploit was written for educational purpose. Use it at your own risk...
e107 website system 0.7.5 news.php Query String (PATH_INFO) Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue to have arbitrary script code execute in the...
e107 website system 0.7.5 fpw.php Query String (PATH_INFO) Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue to have arbitrary script code execute in the...
e107 plugin fm pro 1- (fd/upload/dt) Multiple Vulnerabilities
No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | e107 Plugin fm pro v1 Multiple Remote Vulnerabilities I- Remote File Disclosure / Write File...
e107 <= 0.7.11 - Arbitrary Variable Overwriting Vulnerability
No description provided by source. GulfTech Security Research August 07, 2008 Vendor : Steve Dunstan URL : http://www.e107.org/ Version : e107 = 0.7.11 Risk : Arbitrary Variable Overwriting Description: e107 is a popular full featured content management system written in php. Unfortunately e107...
Reflected Cross-Site Scripting (XSS) in e107
High-Tech Bridge Security Research Lab discovered vulnerability in e107, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Reflected Cross-Site Scripting XSS in e107: CVE-2014-4734 The vulnerability exists due to insufficient sanitization of "type" HTTP GET parameter passed to...
e107 "configure" SQL注入漏洞
e107是一款内容管理系统。 由于程序没有有效验证/e107admin/menus.php脚本的'configure'参数值，攻击者可以利用漏洞通过注入SQL代码操纵SQL查询。 0 e107 1.0.4 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://e107.org/ http://example.com/e107admin/menus.php?configure=-1" or 1=SELECT 1 FROM SELECT SLEEP25A "...
e107多个参数跨站脚本漏洞
e107是一款内容管理系统。 由于通过"multilanguagesubdomain" POST参数传递到/e107admin/language.php和通过"metaauthor" POST参数传递到/e107admin/meta.php的输入在返回用户前未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 e107 1.0.4 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://e107.org/...