Sql injection

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

CVE-2008-5320

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

CVE-2008-5320

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

CVE-2008-5320

CVE-2008-5320 affects e107 0.7.13 and earlier; SQL injection in usersettings.php via the ue[] parameter allows remote authenticated users to execute arbitrary SQL commands. Root cause and exact exploit path are described as the ue[] parameter vulnerability. Remediation details are not provided in...

CVE-2008-5320: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue parameter...

e107 0.7.13 - usersettings.php Blind SQL Injection

e107 0.7.13 - usersettings.php Blind SQL Injection Author: GiReX Homepage: http://girex.altervista.org Date: 19/10/2008 CMS: e107 URL: http://e107.org/ Note: Works regardless of php.ini settings magicquotes, registerglobals.. Attenction: This exploit was written for educational purpose. Use it at...

Cross site scripting

Cross-site scripting XSS vulnerability in usersettings.php in WikkaWiki Wikka Wiki before 1.1.6.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2007-2551

CVE-2007-2551 affects WikkaWiki (Wikka Wiki) prior to 1.1.6.3. The vulnerability is a Cross-Site Scripting (XSS) in usersettings.php that allows remote attackers to inject arbitrary web script or HTML via the name parameter. Impact is consistent with an XSS in the name field, enabling script exec...

CVE-2007-2551: Undefined Security Weakness

Cross-site scripting XSS vulnerability in usersettings.php in WikkaWiki Wikka Wiki before 1.1.6.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2006-5516: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in actions/usersettings.php in WikiNi before 0.4.4 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 email parameters to wakka.php...

CVE-2005-4224: Undefined Security Weakness

Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL commands via 1 the email, hideemail, image, realname, signature, timezone, and xupexist parameters in signup.php, 2 the contentcomment, contentrating, and contentsummary parameters...

CVE-2004-2040

Multiple cross-site scripting XSS vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the 1 LAN407 parameter to clockmenu.php, 2 "email article to a friend" field, 3 "submit news" field, or 4 avmsg parameter to usersettings.php...

CVE-2004-2040: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the 1 LAN407 parameter to clockmenu.php, 2 "email article to a friend" field, 3 "submit news" field, or 4 avmsg parameter to usersettings.php...