Persian E107 XSS Vulnerability

Exploit for php platform in category web applications ============================== Persian E107 XSS Vulnerability ============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

e107 0.7.21 full - Remote File Inclusion Cross-Site Scripting

e107 0.7.21 full - Remote File Inclusion Cross-Site Scripting ======================================================================= e107 0.7.21 full Mullti RFI/XSS Vulnerabilities =======================================================================...

Persian E107 - Cross-Site Scripting

Persian E107 - Cross-Site Scripting ======================================================================================== | Title : Persian E107 XSS Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...

e107 0.7.21 full Mullti (RFI/XSS) Vulnerabilities

Exploit for php platform in category web applications ================================================= e107 0.7.21 full Mullti RFI/XSS Vulnerabilities ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'...

e107 0.7.21 full - Remote File Inclusion / Cross-Site Scripting

======================================================================= e107 0.7.21 full Mullti RFI/XSS Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Persian E107 - Cross-Site Scripting

======================================================================================== | Title : Persian E107 XSS Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iqs3cur1ty.com/vb | Script...

CVE-2010-2098

Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter...

CVE-2010-2099

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

Sql injection

Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter...

Design/Logic Flaw

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

CVE-2010-2099

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

CVE-2010-2099

The e107 content management system (versions 0.7.20 and earlier ) is vulnerable to Remote Code Execution (RCE) due to a logic flaw in the bbcode/php.bb component. The application fails to perform proper access control checks on inputs containing the [php] BBCode tag. Specifically, an unauthentica...

CVE-2010-2098

CVE-2010-2098 affects the e107 CMS, specifically versions 0.7.20 and earlier, where an incomplete blacklist in usersettings.php enables remote SQL injection via the loginname parameter. The vulnerability can impact confidentiality, integrity, and availability as indicated by the CVSS v2 base scor...

CVE-2010-2098

Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter...

CVE-2010-2098: Undefined Security Weakness

Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter...

CVE-2010-2099: Undefined Security Weakness

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

e107 BBCode Arbitrary PHP Code Execution Vulnerability

e107 is prone to a remote PHP code-execution vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107";...

e107 Code Execution

Exploit Title: e107 Code Exec Date: 05/22/10 Author: [email protected] Software Link: http://e107.org/edownload.php Version: e107 agent"Mozilla/5.0"; if $proxy print " Using proxy $proxy \n"; $ua-envproxy'1'; my $req = new HTTP::Request POST = $path;...

e107 <= 0.7.20 Code Execution Vulnerability

Exploit for multiple platform in category web applications =========================================== e107 agent"Mozilla/5.0"; if $proxy print " Using proxy $proxy \n"; $ua-envproxy'1'; my $req = new HTTP::Request POST = $path; $req-contenttype'application/x-www-form-urlencoded';...

e107 - Code Exection

e107 - Code Exection Exploit Title: e107 Code Exec Date: 05/22/10 Author: [email protected] Software Link: http://e107.org/edownload.php Version: e107 agent"Mozilla/5.0"; if $proxy print " Using proxy $proxy \n"; $ua-envproxy'1'; my $req = new HTTP::Request POST = $path;...