e107 resetcore.php SQL Injection

The remote web server contains a PHP script that is prone to a SQL injection attack. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Ref: rgo...

Cross site scripting

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

CVE-2006-0857

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

CVE-2006-0857

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

CVE-2006-0857

CVE-2006-0857 is an XSS vulnerability in the Chatbox Plugin 1.0 for e107 0.7.2. The issue allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element. Reported impact corresponds to a MEDIUM base score (CVSSv2: 4.3; I: PARTIAL). The connect...

e107 CMS 0.7.2 Chatbox plugin XSS vulnerability

Software: e107 CMS 0.7.2 Software Details: Chatbox Plugin v1.0 Class: Remote Type: XSS ========== Desription =========== XSS vulnerability exists in e107 0.7.2 CMS. user input is not correctly sanitized in Chatbox Plugin v1.0. ========== Exploit ============= just paste sample code to a Chatbox:...

E107 Website System 0.7.2 Chatbox Plugin - HTML Injection

source: https://www.securityfocus.com/bid/16719/info The e107 content management system CMS Chatbox Plugin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

E107 Website System 0.7.2 Chatbox Plugin - HTML Injection

E107 Website System 0.7.2 Chatbox Plugin - HTML Injection source: https://www.securityfocus.com/bid/16719/info The e107 content management system CMS Chatbox Plugin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied...

CVE-2006-0682

Multiple cross-site scripting XSS vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-0682

The CVE-2006-0682 entry concerns the e107 content management system, specifically the bbcodes system, with multiple XSS vulnerabilities in versions before 0.7.2. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. The NVD metrics assign a ...

CVE-2006-0682

Multiple cross-site scripting XSS vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

[SA18816] e107 Unspecified BBCode Script Insertion Vulnerabilities

TITLE: e107 Unspecified BBCode Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA18816 VERIFY ADVISORY: http://secunia.com/advisories/18816/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: e107 0.x http://secunia.com/product/1927/ DESCRIPTION: Some...

CVE-2005-4224

Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL commands via 1 the email, hideemail, image, realname, signature, timezone, and xupexist parameters in signup.php, 2 the contentcomment, contentrating, and contentsummary parameters...

CVE-2005-4224

Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL commands via 1 the email, hideemail, image, realname, signature, timezone, and xupexist parameters in signup.php, 2 the contentcomment, contentrating, and contentsummary parameters...

CVE-2005-4224

CVE-2005-4224 affects e107 0.7 (and related entries) with multiple potential SQL injection paths. The vulnerabilities allow remote attackers to potentially execute arbitrary SQL through parameters in signup.php, subcontent.php, upload.php, and usersettings.php (e.g., email, hideemail, realname, s...

[PHP-CHECKER] 99 potential SQL injection vulnerabilities

Hi, we are a group of Stanford researchers and we have recently developed an automated tool for detecting injection vulnerabilities in PHP. We ran our tool on the following list of software and found 99 potential security vulnerabilites inspected bug reports attached below: e107 -- v0.7 myBloggie...

CVE-2005-4051

e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php...

CVE-2005-4052

e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which is used after a user submits a file download rating. NOTE: in the default installation, the eBASE variable restricts the redirection to the same web site...

CVE-2005-4051

The CVE-2005-4051 entry concerns e107 version 0.6174, where remote attackers can abuse the rating mechanism to vote multiple times for a download by issuing repeated requests to rate.php. This describes a vulnerability in the download rating feature that enables repeated submissions, but the prov...