CVE-2011-0457

Cross-site scripting XSS vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4757

The CVE-2010-4757 entry describes a cross-site scripting (XSS) vulnerability in e107’s submitnews.php, exploitable via the submitnews_title parameter in versions before 0.7.23. This is a client-side script injection risk affecting e107, with impact limited to arbitrary script execution in the use...

CVE-2010-4757

Cross-site scripting XSS vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnewstitle parameter, a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: this...

JVN#01635457: e107 vulnerable to cross-site scripting

e107 provided by e107.org is a Content Management System CMS software. e107 contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the...

e107 0.7.23 Forum插件SQL注入漏洞

BUGTRAQ ID: 43511 e107是用php编写的内容管理系统。 e107没有正确地过滤提交给forumadmin.php脚本的GET请求便在SQL查询中使用，远程攻击者可以通过提交恶意查询请求执行SQL注入攻击。成功利用这个漏洞要求启用了Forum插件。 e107 website system 0.7.23 厂商补丁： e107.org -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://e107.org/...

e107 v0.7.23 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== e107 v0.7.23 SQL Injection Vulnerability ======================================== Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions...

e107 0.7.23 SQL Injection

Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerability Type: SQL Injectio...

e107 0.7.23 - SQL Injection

e107 0.7.23 - SQL Injection Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010...

e107 0.7.23 - SQL Injection

Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerability Type: SQL Injectio...

SQL injection vulnerability in e107

Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerability Type: SQL Injectio...

e107 0.7.23 SQL Injection

=============================================== Vulnerability ID: HTB22603 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1071.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 03...

SQL injection vulnerability in e107

Vulnerability ID: HTB22603 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1071.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 03 September 2010 Vulnerability Type: SQL Injectio...

SQL injection vulnerability in e107

Vulnerability ID: HTB22602 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine107.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 03 September 2010 Vulnerability Type: SQL Injection...

e107 0.7.23 - Multiple SQL Injections

e107 0.7.23 - Multiple SQL Injections source: https://www.securityfocus.com/bid/43327/info e107 is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

e107 0.7.23 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/43327/info e107 is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...

Multiple SQL injection vulnerabilities in e107

High-Tech Bridge SA Security Research Lab has discovered three SQL injection vulnerabilities in e107 which could lead to execution of arbitrary SQL commands in applications database. 1 SQL injection vulnerabilities in e107 1.1 An input validation error exists in the URL in /e107admin/wmessage.php...

e107 CMS Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability Report Details of this report may also be found at http://www.madirish.net/?article=471 Description of Vulnerability: - ----------------------------- e107 http://e107.org is a PHP/MySQL based content management system. e107 allows...

VulnCheck KEV: CVE-2010-2099

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

e107 0.7.21 cross site scripting vulnerability-vulnerability warning-the black bar safety net

http://127.0.0.1/e107/usersettings.php and Edit Signature / Timezone Put this code Or other's Edit signature/time zone to put this code """scriptlocation="http://www.myhack58.com"/script"""" ScRiPtalert3 3 0 8 9 6 3 2/ScRiPt...

e107 0.7.21 cross site scripting Vulnerabilities

No description provided by source. After Rigester Go to user Seting 1 - http://127.0.0.1/e107/usersettings.php and Edit Signature / Timezone Put this code Or other's """scriptlocation="http://w ww.arab-blackhat.co.cc"/script"""" ScRiPtalert213771818860/ScRiPt Dz-Ghost Team ===== Saoucha Star08...