Back to search
CVE-2011-4946
Published: Aug 31, 2012
Modified: Aug 7, 2024
PUBLISHED
Description
SQL injection vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands via the user_field parameter.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
e107-usersextended-sql-injection(68061)
vdb-entry
x_refsource_XF
44968
third-party-advisory
x_refsource_SECUNIA
73120
vdb-entry
x_refsource_OSVDB
[oss-security] 20120328 CVE-request: e107 HTB23004
mailing-list
x_refsource_MLIST
http://e107.org/svn_changelog.php?version=0.7.26
x_refsource_CONFIRM
[oss-security] 20120328 Re: CVE-request: e107 HTB23004
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now