53 matches found
EUVD-2008-5297
Malware in sbrugna...
EUVD-2018-7757
Malware in sbrugna...
EUVD-2010-2115
Malware in sbrugna...
EUVD-2015-1200
Malware in sbrugna...
EUVD-2007-2544
Malware in sbrugna...
CVE-2021-27885
usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...
CVE-2021-27885
usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...
Design/Logic Flaw
usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...
CVE-2021-27885
CVE-2021-27885 affects e107 up to version 2.3.0, due to missing e_TOKEN protection in usersettings.php. This CSRF flaw allows an attacker to coerce actions (e.g., password changes) without authentication, as evidenced by the public CSRF exploit and related vulnerability notes. Public references d...
CVE-2021-27885
usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...
CVE-2021-27885: Cross-Site Request Forgery (CSRF)
usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...
PT-2021-17645 · E107 · E107
Name of the Vulnerable Software and Affected Versions: e107 versions 2.3.0 and earlier Description: The issue is related to the lack of a certain e TOKEN protection mechanism in the usersettings.php file. This affects the security of the software. Recommendations: For versions 2.3.0 and earlier,...
CVE-2016-10753
e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...
CVE-2016-10753
e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...
Sql injection
e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...
CVE-2016-10753
CVE-2016-10753 affects e107 2.1.2. It enables a PHP Object Injection vulnerability via usersettings.php that calls unserialize without an HMAC, which leads to a subsequent SQL injection. The root cause is improper handling of unserialize data, enabling an attacker-controlled object to affect data...
CVE-2016-10753: Deserialization of Untrusted Data
e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...
CVE-2018-15901
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...