Description
SQL injection vulnerability in the search feature in e107 0.7.16 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- 20091123 [Bkis-13-2009] e107 Multiple Vulnerabilities mailing-list
- http://blog.bkis.com/e107-multiple-vulnerabilities/
- 37087 vdb-entry
- e107-search-sql-injection(54373) vdb-entry