Description
Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php.
References
- 6532 vdb-entry
- 6531 vdb-entry
- http://www.waraxe.us/index.php?modname=sa&id=31
- 10436 vdb-entry
- e107-content-news-sql-injection(16283) vdb-entry
- 11740 third-party-advisory
- 20040529 [waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615] mailing-list
- 20040529 [waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615] mailing-list
- 6533 vdb-entry