CVE-2008-6114

CVE-2008-6114 affects the Mytipper Zogo-shop 1.15.4 plugin for e107. The vulnerability is a SQL injection in product_details.php, exploitable via the product parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: the plugin’s product_details.php; root cause is...

CVE-2008-6114

SQL injection vulnerability in productdetails.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attackers to execute arbitrary SQL commands via the product parameter...

CVE-2008-6114: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in productdetails.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attackers to execute arbitrary SQL commands via the product parameter...

CVE-2008-6069

CVE-2008-6069 describes an SQL injection in the eChat plugin 4.2 for e107, via the nick parameter in e107chat.php, when magic_quotes_gpc is disabled. The issue is exploitable remotely over the network (as per the NVD vector), potentially impacting confidentiality, integrity, and availability (par...

CVE-2008-6069

SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter...

CVE-2008-6069: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter...

Vulnerabilities in E107

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в системе E107. Insufficient Anti-automation: Уязвимости в капче на странице отправки ссылки на новость. Которая уязвима к полуавтоматическому методу обхода...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. E107: обход CAPTCHA, межсайтовый скриптинг...

Sql injection

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

CVE-2008-5320

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

CVE-2008-5320

CVE-2008-5320 affects e107 0.7.13 and earlier; SQL injection in usersettings.php via the ue[] parameter allows remote authenticated users to execute arbitrary SQL commands. Root cause and exact exploit path are described as the ue[] parameter vulnerability. Remediation details are not provided in...

CVE-2008-5320

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

CVE-2008-5320: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

e107 Plugin ZoGo-Shop 1.15.4 - product SQL Injection

e107 Plugin ZoGo-Shop 1.15.4 - product SQL Injection ========================================================================================= o ZoGo-Shop e107 plugins 1.15.4 SQL Injection Vulnerability Software : ZoGo-Shop plugin version 1.15.4 Vendor : http://e107.org/ Download :...

e107 Plugin ZoGo-Shop 1.15.4 (product) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== e107 Plugin ZoGo-Shop 1.15.4 product SQL Injection Vulnerability ==================================================================...

e107 Plugin ZoGo-Shop 1.15.4 - 'product' SQL Injection

========================================================================================= o ZoGo-Shop e107 plugins 1.15.4 SQL Injection Vulnerability Software : ZoGo-Shop plugin version 1.15.4 Vendor : http://e107.org/ Download : http://plugins.e107.org/e107plugins/psilo/psilo.php?artifact.89...

e107 alternate_profiles plugin newuser.php SQL Injection Vulnerability

e107 is prone to remote SQL injection vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107"; ifdescription...

CVE-2008-4906

SQL injection vulnerability in lyricssong.php in the Lyrics lyricsmenu plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the lid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in lyricssong.php in the Lyrics lyricsmenu plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the lid parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4906

CVE-2008-4906 describes an SQL injection in the Lyrics (lyrics_menu) plugin for e107, version 0.42, where the l_id parameter enables remote attackers to execute arbitrary SQL commands. This is a high-severity issue (CVSS v2 base score 7.5). The provided documents confirm the vulnerable component ...