Description

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php.

Remediation

References

CVE-2004-2042

Related Vulnerabilities

Envoy Proxy Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2024-32975)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.51)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-3385)

Drupal Core 4.6.x Security Bypass (4.6.0 - 4.6.5)

Oracle Database Server CVE-2011-0793 Vulnerability (CVE-2011-0793)

Severity

High

Classification

CVE-2004-2042

Tags

Missing Update Known Vulnerabilities