Description

SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary SQL commands, bypass authentication, and inject HTML or script via the (1) a_name parameter or (2) user field of the login page.

Remediation

References

CVE-2005-3521

Related Vulnerabilities

ownCloud Improper Authentication Vulnerability (CVE-2020-10254)

WordPress Plugin Titan Framework Cross-Site Scripting (1.12.1)

WordPress Plugin WordPress Comments Import & Export Cross-Site Request Forgery (2.1.10)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1407)

Squid Out-of-bounds Write Vulnerability (CVE-2019-18676)

Severity

High

Classification

CVE-2005-3521

Tags

Missing Update Known Vulnerabilities