medium5.1
CVE-2011-4921
SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL comm…
Impact
SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E107 | E107 | Version 0.7.26 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/78050
- http://secunia.com/advisories/46706
- http://www.openwall.com/lists/oss-security/2012/01/04/3
- http://www.securityfocus.com/bid/51253
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72011
- http://osvdb.org/78050
- http://secunia.com/advisories/46706
- http://www.openwall.com/lists/oss-security/2012/01/04/3
- http://www.securityfocus.com/bid/51253
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72011