CVE-2006-2590

CVE-2006-2590: SQL injection in e107 prior to 0.7.5 allows remote attackers to execute arbitrary SQL via unknown attack vectors. Affected software: e107 (before 0.7.5). Root cause: input handling insufficient to prevent SQL injection. Impact per CVSS: partial confidentiality and partial integrity...

e107072.txt

Software: e107 CMS Versions: list$uid, $upw=$COOKIE$pref'cookiename' ? explode".", $COOKIE$pref'cookiename' : explode".", $SESSION$pref'cookiename'; ..... if$result = getuserdata$uid, "AND md5u.userpassword='$upw'", FALSE ..... Exploit: 0.6.xxx 1.blablahashpassword' union select from e107user whe...

CVE-2006-2416

SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref'cookiename'...

Sql injection

SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref'cookiename'...

CVE-2006-2416

CVE-2006-2416 affects e107 0.7.2 and earlier. The vulnerability originates from SQL injection in class2.php via the application cookie named in $pref['cookie_name'], allowing remote attackers to execute arbitrary SQL commands. Exploitation is described as remote and unauthenticated in public sour...

e107 e107_cookie Parameter SQL Injection

The version of e107 installed on the remote host fails to sanitize input to the application-specific cookie used for authentication. Provided PHP's 'magicquotesgpc' setting is disabled, a remote, unauthenticated attacker can leverage this issue to bypass authentication and generally manipulate SQ...

SQL-Injection in e107 allows attacker to become a site admininstrator

Software: e107 CMS Versions: = 0.7.2 Type: SQL-injection Homepage: www.e107.org Description: ---------------------------- SQL-Injection in e107 allows attacker to become a site admininstrator. Requirements: ---------------------------- Magicquotesgpc = Off Vulnerability:...

Cmscout <= V1.10 multiple XSS attack vectors

Cmscout = V1.10 multiple XSS attack vectors Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement CMScout is a CMS Content management system for scouting related groups from around the world. A CMS is a piece of web software that makes it easy for you t...

e107 resetcore.php SQL Injection

The remote web server contains a PHP script that is prone to a SQL injection attack. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Ref: rgo...

CVE-2006-0857

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

Cross site scripting

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

CVE-2006-0857

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

CVE-2006-0857

CVE-2006-0857 is an XSS vulnerability in the Chatbox Plugin 1.0 for e107 0.7.2. The issue allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element. Reported impact corresponds to a MEDIUM base score (CVSSv2: 4.3; I: PARTIAL). The connect...

e107 CMS 0.7.2 Chatbox plugin XSS vulnerability

Software: e107 CMS 0.7.2 Software Details: Chatbox Plugin v1.0 Class: Remote Type: XSS ========== Desription =========== XSS vulnerability exists in e107 0.7.2 CMS. user input is not correctly sanitized in Chatbox Plugin v1.0. ========== Exploit ============= just paste sample code to a Chatbox:...

E107 Website System 0.7.2 Chatbox Plugin - HTML Injection

E107 Website System 0.7.2 Chatbox Plugin - HTML Injection source: https://www.securityfocus.com/bid/16719/info The e107 content management system CMS Chatbox Plugin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied...

E107 Website System 0.7.2 Chatbox Plugin - HTML Injection

source: https://www.securityfocus.com/bid/16719/info The e107 content management system CMS Chatbox Plugin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

CVE-2006-0682

Multiple cross-site scripting XSS vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-0682

Multiple cross-site scripting XSS vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-0682

The CVE-2006-0682 entry concerns the e107 content management system, specifically the bbcodes system, with multiple XSS vulnerabilities in versions before 0.7.2. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. The NVD metrics assign a ...