Unscored CVE-2011-4921 EUVD-2011-4832GHSA-6jj8-63q6-89g6

SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execut…

Published Jan 4, 2012 · Updated Aug 7, 2024 · Assigned by redhat

Description

SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.

References

46706 third-party-advisory
e107inc-usersettings-sql-injection(72011) vdb-entry
78050 vdb-entry
51253 vdb-entry
[oss-security] 20120104 Re: CVE-request: Multiple e107 vulnerabilities mailing-list