Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
e107 e107 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2005-4051
e107 0.6174 allows remote malicious users to vote multiple times for a download via repeated requests to rate.php.
E107 E107 0.6174
NA
CVE-2006-4794
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote malicious users to inject arbitrary web script or HTML via the query string (PATH_INFO) in (1) contact.php, (2) download.php, (3) admin.php, (4) fpw.php, (5) news.php, (6) search.php, (7) signup.php, (...
E107 E107 0.7.5
9 EDB exploits
4.3
CVSSv3
CVE-2018-17081
e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used=1&id= for changing the title of an arbitrary page.
E107 E107 2.1.9
1 Github repository
4.8
CVSSv3
CVE-2018-17423
An issue exists in e107 v2.1.9. There is a XSS attack on e107_admin/comment.php.
E107 E107 2.1.9
6.1
CVSSv3
CVE-2018-11734
In e107 v2.1.7, output without filtering results in XSS.
E107 E107 2.1.7
NA
CVE-2006-2590
SQL injection vulnerability in e107 prior to 0.7.5 allows remote malicious users to execute arbitrary SQL commands via unknown attack vectors.
E107 E107 0.7.5
NA
CVE-2005-1966
The eTrace_validaddr function in eTrace plugin for e107 portal allows remote malicious users to execute arbitrary commands via shell metacharacters after a valid argument to the etrace_host parameter.
E107 E107 1.0.1
NA
CVE-2005-4224
Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote malicious users to execute arbitrary SQL commands via (1) the email, hideemail, image, realname, signature, timezone, and xupexist parameters in signup.php, (2) the content_comment, conten...
E107 E107 0.7
8.8
CVSSv3
CVE-2018-15901
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators.
E107 E107 2.1.8
1 Github repository
NA
CVE-2011-4921
SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions prior to 1.0.0, allows remote malicious users to execute arbitrary SQL commands via the username parameter.
E107 E107 0.7.26
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-36920
buffer overflow
CVE-2024-36913
CVE-2024-5497
CVE-2024-23917
CVE-2024-4956
server-side request forgery
CVE-2024-35468
SSTI
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »