Description

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php.

Remediation

References

CVE-2004-2042

Related Vulnerabilities

XWiki CVE-2023-50720 Vulnerability (CVE-2023-50720)

WordPress Plugin Simple add pages or posts Cross-Site Request Forgery (1.6)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2204)

WordPress Plugin Per page add to head Cross-Site Request Forgery (1.4.3)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3488)

Severity

High

Classification

CVE-2004-2042

Tags

Missing Update Known Vulnerabilities