EUVD-2018-7757

Malware in sbrugna...

EUVD-2007-2544

Malware in sbrugna...

EUVD-2010-2115

Malware in sbrugna...

EUVD-2015-1200

Malware in sbrugna...

EUVD-2008-5297

Malware in sbrugna...

CVE-2021-27885

usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...

CVE-2021-27885

usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...

Design/Logic Flaw

usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...

CVE-2021-27885

CVE-2021-27885 affects e107 up to version 2.3.0, due to missing e_TOKEN protection in usersettings.php. This CSRF flaw allows an attacker to coerce actions (e.g., password changes) without authentication, as evidenced by the public CSRF exploit and related vulnerability notes. Public references d...

CVE-2021-27885

usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism...

PT-2021-17645 · E107 · E107

Name of the Vulnerable Software and Affected Versions: e107 versions 2.3.0 and earlier Description: The issue is related to the lack of a certain e TOKEN protection mechanism in the usersettings.php file. This affects the security of the software. Recommendations: For versions 2.3.0 and earlier,...

Sql injection

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...

CVE-2016-10753

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...

CVE-2016-10753

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC...

CVE-2016-10753

CVE-2016-10753 affects e107 2.1.2. It enables a PHP Object Injection vulnerability via usersettings.php that calls unserialize without an HMAC, which leads to a subsequent SQL injection. The root cause is improper handling of unserialize data, enabling an attacker-controlled object to affect data...

CVE-2018-15901

e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...

Cross site request forgery (csrf)

e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...

CVE-2018-15901

The CVE-2018-15901 entry concerns e107 2.1.8, where a CSRF flaw in usersettings.php allows altering user details, including administrator passwords. The vulnerability’s root cause is improper CSRF protection in the usersettings.php workflow, enabling unauthorized changes without user interaction....

CVE-2018-15901

e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators...

e107 CMS 2.1.2 Privilege Escalation

Exploit Title: e107 CMS 2.1.2 Privilege Escalation Date: 09-11-2016 Software Link: http://e107.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Datas from $POST'updateddata' inside usersettings.php are...