Vulnerabilities in E107

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в системе E107. Insufficient Anti-automation: Уязвимости в капче на странице отправки ссылки на новость. Которая уязвима к полуавтоматическому методу обхода...

CVE-2008-5320

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

Sql injection

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

CVE-2008-5320

CVE-2008-5320 affects e107 0.7.13 and earlier; SQL injection in usersettings.php via the ue[] parameter allows remote authenticated users to execute arbitrary SQL commands. Root cause and exact exploit path are described as the ue[] parameter vulnerability. Remediation details are not provided in...

CVE-2008-5320

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

e107 Plugin ZoGo-Shop 1.15.4 - product SQL Injection

e107 Plugin ZoGo-Shop 1.15.4 - product SQL Injection ========================================================================================= o ZoGo-Shop e107 plugins 1.15.4 SQL Injection Vulnerability Software : ZoGo-Shop plugin version 1.15.4 Vendor : http://e107.org/ Download :...

e107 Plugin ZoGo-Shop 1.15.4 (product) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== e107 Plugin ZoGo-Shop 1.15.4 product SQL Injection Vulnerability ==================================================================...

e107 Plugin ZoGo-Shop 1.15.4 - 'product' SQL Injection

========================================================================================= o ZoGo-Shop e107 plugins 1.15.4 SQL Injection Vulnerability Software : ZoGo-Shop plugin version 1.15.4 Vendor : http://e107.org/ Download : http://plugins.e107.org/e107plugins/psilo/psilo.php?artifact.89...

e107 alternate_profiles plugin newuser.php SQL Injection Vulnerability

e107 is prone to remote SQL injection vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107"; ifdescription...

CVE-2008-4906

SQL injection vulnerability in lyricssong.php in the Lyrics lyricsmenu plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the lid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in lyricssong.php in the Lyrics lyricsmenu plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the lid parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4906

SQL injection vulnerability in lyricssong.php in the Lyrics lyricsmenu plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the lid parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4906

CVE-2008-4906 describes an SQL injection in the Lyrics (lyrics_menu) plugin for e107, version 0.42, where the l_id parameter enables remote attackers to execute arbitrary SQL commands. This is a high-severity issue (CVSS v2 base score 7.5). The provided documents confirm the vulnerable component ...

e107 Plugin lyrics_menu (lyrics_song.php l_id) SQL Injection Vulnerability

No description provided by source. e107 Plugin lyricsmenu lyricssong.php lid Remote Sql inj author: ZoRLu home: z0rlu.blogspot.com concat: [email protected] date: 30/10/2008 saat 23:36 thek@m!l'lerdeyim a.q : n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA : n0te: a.q kpss : dork:...

e107 Plugin lyrics_menu (lyrics_song.php l_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================================== e107 Plugin lyricsmenu lyricssong.php lid SQL Injection Vulnerability ========================================================================== e107 Plugin...

e107 Plugin lyrics_menu - l_id SQL Injection

e107 Plugin lyricsmenu - lid SQL Injection e107 Plugin lyricsmenu lyricssong.php lid Remote Sql inj author: ZoRLu home: z0rlu.blogspot.com concat: [email protected] date: 30/10/2008 saat 23:36 thek@m!l'lerdeyim a.q : n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA : n0te: a.q kpss : dork:...

e107 Plugin lyrics_menu - 'l_id' SQL Injection

e107 Plugin lyricsmenu lyricssong.php lid Remote Sql inj author: ZoRLu home: z0rlu.blogspot.com concat: [email protected] date: 30/10/2008 saat 23:36 thek@m!l'lerdeyim a.q : n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA : n0te: a.q kpss : dork: allinurl:"lyricsmenu/lyricssong.php?lid=" exploi...

CVE-2008-4785

SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

Sql injection

SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...