1144 matches found
e107 1.0.1 Administrator Cross Site Request Forgery
Exploit Title: e107 v1.0.1 Administrator CSRF Resulting in Arbitrary Javascript Execution Google Dork: intext:"This site is powered by e107" Date: 01/01/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://e107.org Software Link:...
e107 7 jbShop plugin jbshop. php within the XSS vulnerability-vulnerability warning-the black bar safety net
Affected system: e107 e107 7 Description: -------------------------------------------------------------------------------- CVE ID: CVE-2 0 1 1-5 1 8 6 e107 is a php written content management system. e107 version 7 of the jbShop plugin jbshop. php memoryXSSvulnerability that may allow a remote...
Cross site scripting
Cross-site scripting XSS vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter...
CVE-2011-5186
Cross-site scripting XSS vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter...
CVE-2011-5186
CVE-2011-5186 affects the jbShop plugin for e107 7. The vulnerability is a Cross-site Scripting (XSS) in jbshop.php via the item_id parameter, allowing remote attackers to inject arbitrary web script or HTML. Root cause is insufficient input sanitization on that parameter. Exploitation details ar...
PT-2012-2163
Name of the Vulnerable Software and Affected Versions e107 version 7 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the item id parameter in the jbShop plugin. Recommendations For version 7, update the jbShop plugin to a version that...
CVE-2011-5186: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter...
CVE-2011-4946
SQL injection vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands via the userfield parameter...
CVE-2011-4947
Cross-site request forgery CSRF vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the userinclude parameter...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the userinclude parameter...
Sql injection
SQL injection vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands via the userfield parameter...
CVE-2011-4946
The CVE-2011-4946 entry documents an SQL injection in the e107 CMS before version 0.7.26. Specifically, the vulnerability exists in e107_admin/users_extended.php and allows remote attackers to inject SQL via the user_field parameter, enabling arbitrary SQL execution. The connected records confirm...
CVE-2011-4947
Cross-site request forgery CSRF vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the userinclude parameter...
CVE-2011-4946
SQL injection vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands via the userfield parameter...
CVE-2011-4947
The CVE-2011-4947 entry describes a CSRF vulnerability in e107, affecting e107_admin/users_extended.php prior to version 0.7.26. Remote attackers could hijack administrator sessions and cause the execution of XSS sequences via the user_include parameter. The underlying issue is a lack of CSRF pro...
PT-2012-2013
Name of the Vulnerable Software and Affected Versions e107 versions prior to 0.7.26 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the user include parameter...
CVE-2011-4947: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the userinclude parameter...
PT-2012-2012
Name of the Vulnerable Software and Affected Versions e107 versions prior to 0.7.26 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the user field parameter in the e107 admin/users extended.php file. Recommendations For versions prior to 0.7.2...
CVE-2011-4946: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands via the userfield parameter...
