CVE-2018-16381

e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...

CVE-2018-16381

e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...

CVE-2018-16381

CVE-2018-16381 affects e107 2.1.8 with an XSS vulnerability in the e107_admin/users.php?mode=main&action=list user_loginname parameter. The connected documents reference this CVE in unrelated packages (e.g., php5-smarty3/OpenSUSE security updates and OpenVAS listings) but do not provide additiona...

CVE-2018-16381

e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...

CVE-2018-16381: Improper Neutralization of Input During Web Page Generation

e107 2.1.8 has XSS via the e107admin/users.php?mode=main&action=list userloginname parameter...

jbShop SQL Injection

Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability Author: Robert Cooper adminatwebsiteauditing.org Software Link: http://sourceforge.net/projects/jbshop/ Tested on: Linux/Windows 7 Vulnerable Parameter: itemid= PoC:...