Skip to content

E107 vulnerabilities

Products

Newest

e107Cross-site scripting (XSS) vulnerability in submitnews.php in e107 CMS 0.7.11 allows remote...CVE-2008-62084.3 MediumFebruary 20, 2009
e107SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote...CVE-2008-5320Public exploit6.5 MediumDecember 3, 2008
e107 easyshop pluginSQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote...CVE-2008-4786Public exploit7.5 HighOctober 29, 2008
e107 alternate profiles pluginSQL injection vulnerability in newuser.php in the alternate_profiles plugin, possibly 0.2, for...CVE-2008-4785Public exploit7.5 HighOctober 29, 2008
e107, labgab, my123tkshop e-commerce-suite +5 more +7 moreThe CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e...CVE-2008-20207.5 HighApril 30, 2008
e107, 123flashchat 123 flash chat module +1 morePHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module...CVE-2008-1989Public exploit10.0 HighApril 27, 2008
e107 my galleryAbsolute path traversal vulnerability in dload.php in the my_gallery 2.3 plugin for e107 allows...CVE-2008-1702Public exploit4.3 MediumApril 8, 2008
e107Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph...CVE-2007-3429Public exploit6.8 MediumJune 27, 2007
e107Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers...CVE-2006-5786Public exploit7.5 HighNovember 7, 2006
e107Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to...CVE-2006-4794Public exploit4.3 MediumSeptember 14, 2006
e107Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote...CVE-2006-47574.6 MediumSeptember 13, 2006
e107e107 0.75 and earlier does not properly unset variables when the input data includes a numeric...CVE-2006-45487.5 HighSeptember 6, 2006
e107Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to...CVE-2006-3259Public exploit4.3 MediumJune 27, 2006
e107Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors...CVE-2006-25915.0 MediumMay 25, 2006
e107SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL...CVE-2006-25906.4 MediumMay 25, 2006
e107SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to...CVE-2006-24165.1 MediumMay 16, 2006
e107 chatbox plugin, e107 +1 moreCross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote...CVE-2006-0857Public exploit4.3 MediumFebruary 23, 2006
e107Multiple cross-site scripting (XSS) vulnerabilities in bbcodes system in e107 before 0.7.2 allow...CVE-2006-06824.3 MediumFebruary 15, 2006
e107Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to...CVE-2005-42247.5 HighDecember 14, 2005
e107e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests...CVE-2005-40515.0 MediumDecember 7, 2005
e107game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods...CVE-2005-35945.0 MediumNovember 16, 2005
e107SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers...CVE-2005-35217.5 HighNovember 6, 2005
e107forum_post.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying...CVE-2005-28055.0 MediumSeptember 6, 2005
e107doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute...CVE-2005-25597.5 HighAugust 16, 2005
e107Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to...CVE-2005-2327Public exploit4.3 MediumJuly 20, 2005
e107The eping_validaddr function in functions.php for the ePing plugin for e107 portal allows remote...CVE-2005-19497.5 HighJune 14, 2005
e107The eTrace_validaddr function in eTrace plugin for e107 portal allows remote attackers to execute...CVE-2005-19667.5 HighJune 10, 2005
e107ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which...CVE-2004-2262Public exploitEPSS 14.9%7.5 HighDecember 31, 2004
e107Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary...CVE-2004-20427.5 HighMay 29, 2004
e107Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to...CVE-2004-2040Public exploit4.3 MediumMay 29, 2004
e107e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1)...CVE-2004-20395.0 MediumMay 29, 2004
e107Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject...CVE-2004-20314.3 MediumMay 21, 2004
e107Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject...CVE-2004-2028Public exploit4.3 MediumMay 21, 2004
e107chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages...CVE-2003-1191Public exploit5.0 MediumOctober 29, 2003