Description

SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary SQL commands, bypass authentication, and inject HTML or script via the (1) a_name parameter or (2) user field of the login page.

Remediation

References

CVE-2005-3521

Related Vulnerabilities

WordPress 4.3.x Cross-Domain Flash Injection Vulnerability (4.3 - 4.3.14)

MySQL CVE-2021-2172 Vulnerability (CVE-2021-2172)

Oracle JRE CVE-2013-0437 Vulnerability (CVE-2013-0437)

WordPress Plugin Duo Two-Factor Authentication Security Bypass (1.8.1)

Oracle Application Server Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2018-5407)

Severity

High

Classification

CVE-2005-3521

Tags

Missing Update Known Vulnerabilities