e107 0.7.21 remote file inclusion Vulnerabilities

No description provided by source. Name: e107 0.7.21 full RFI Vulnerabilities Vendor: http://e107.org/ Date: 2010-05-27 Author : indoushka Thanks to : Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com ! Contact : [email protected] Home : www.arab-blackhat.co.cc Bug : RFI Tested on :...

e107 0.7.21 Cross Site Scripting / Remote File Inclusion

======================================================================= e107 0.7.21 full Mullti RFI/XSS Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Persian E107 Cross Site Scripting

======================================================================================== | Title : Persian E107 XSS Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iqs3cur1ty.com/vb | Script...

e107 0.7.21 full Mullti (RFI/XSS) Vulnerabilities

Exploit for php platform in category web applications ================================================= e107 0.7.21 full Mullti RFI/XSS Vulnerabilities ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'...

e107 0.7.21 full - Remote File Inclusion Cross-Site Scripting

e107 0.7.21 full - Remote File Inclusion Cross-Site Scripting ======================================================================= e107 0.7.21 full Mullti RFI/XSS Vulnerabilities =======================================================================...

Persian E107 XSS Vulnerability

Exploit for php platform in category web applications ============================== Persian E107 XSS Vulnerability ============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

Persian E107 - Cross-Site Scripting

Persian E107 - Cross-Site Scripting ======================================================================================== | Title : Persian E107 XSS Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...

e107 0.7.21 full - Remote File Inclusion / Cross-Site Scripting

======================================================================= e107 0.7.21 full Mullti RFI/XSS Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Persian E107 - Cross-Site Scripting

======================================================================================== | Title : Persian E107 XSS Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iqs3cur1ty.com/vb | Script...

CVE-2010-2098

Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter...

CVE-2010-2099

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

Sql injection

Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter...

Design/Logic Flaw

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

CVE-2010-2098

CVE-2010-2098 affects the e107 CMS, specifically versions 0.7.20 and earlier, where an incomplete blacklist in usersettings.php enables remote SQL injection via the loginname parameter. The vulnerability can impact confidentiality, integrity, and availability as indicated by the CVSS v2 base scor...

CVE-2010-2098

Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter...

CVE-2010-2099

CVE-2010-2099 affects e107 SOAP? No. What it affects: bbcode/php.bb in e107 0.7.20 and earlier. Root cause: input handling failure in php bbcode tag without proper access control, enabling remote attackers to execute arbitrary PHP code. Demonstrated via toEmail method in contact.php and related t...

CVE-2010-2099

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

e107 Code Execution

Exploit Title: e107 Code Exec Date: 05/22/10 Author: [email protected] Software Link: http://e107.org/edownload.php Version: e107 agent"Mozilla/5.0"; if $proxy print " Using proxy $proxy \n"; $ua-envproxy'1'; my $req = new HTTP::Request POST = $path;...

e107 BBCode Arbitrary PHP Code Execution Vulnerability

e107 is prone to a remote PHP code-execution vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107";...

e107 - Code Exection

e107 - Code Exection Exploit Title: e107 Code Exec Date: 05/22/10 Author: [email protected] Software Link: http://e107.org/edownload.php Version: e107 agent"Mozilla/5.0"; if $proxy print " Using proxy $proxy \n"; $ua-envproxy'1'; my $req = new HTTP::Request POST = $path;...