8 matches found
CVE-2016-10378
e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107admin/menus.php, related to the menuSaveVisibility function...
Sql injection
e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107admin/menus.php, related to the menuSaveVisibility function...
CVE-2016-10378
e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107admin/menus.php, related to the menuSaveVisibility function...
CVE-2016-10378
e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107admin/menus.php, related to the menuSaveVisibility function...
CVE-2016-10378
e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107admin/menus.php, related to the menuSaveVisibility function...
CVE-2016-10378
CVE-2016-10378 affects e107 2.1.1, where SQL injection is possible through the pagelist parameter to the admin script e107_admin/menus.php, related to the menuSaveVisibility function. The vulnerability arises from improper handling of input by that function, enabling a remote attacker with authen...
CVE-2016-10378: Improper Neutralization of Special Elements used in an SQL Command
e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107admin/menus.php, related to the menuSaveVisibility function...
PT-2017-7892
Name of the Vulnerable Software and Affected Versions e107 version 2.1.1 Description The issue allows SQL injection by remote authenticated administrators via the pagelist parameter to "e107 admin/menus.php", related to the menuSaveVisibility function. Recommendations For e107 version 2.1.1,...