This CPE summary could be partial or incomplete. Please contact us for a detailed listing.


CPE Namecpe:/a:e107:e107:0.7.11
Vendore107First view 2008-04-29
Producte107Last view2014-07-21
CPE Productcpe:/a:e107:e107

Activity : Overall

Related : CVE

 DateAlertAccess VectorAccess ComplexityAuthentication
4.32014-07-21CVE-2014-4734NetworkMediumNone Requ...
4.32014-01-22CVE-2013-7305NetworkMediumNone Requ...
4.32014-01-22CVE-2013-2750NetworkMediumNone Requ...
6.82012-08-31CVE-2011-4947NetworkMediumNone Requ...
6.82012-08-31CVE-2011-4946NetworkMediumNone Requ...
Hide | Show 15 More...
 DateAlertAccess VectorAccess ComplexityAuthentication
62012-02-14CVE-2010-5084NetworkMediumRequires ...
7.52011-11-04CVE-2011-1513NetworkLowNone Requ...
4.32011-03-15CVE-2011-0457NetworkMediumNone Requ...
4.32011-03-15CVE-2010-4757NetworkMediumNone Requ...
7.52010-05-27CVE-2010-2099NetworkLowNone Requ...
7.52010-05-27CVE-2010-2098NetworkLowNone Requ...
3.52010-04-20CVE-2010-0997NetworkMediumRequires ...
62010-04-20CVE-2010-0996NetworkMediumRequires ...
7.52009-11-29CVE-2009-4084NetworkLowNone Requ...
4.32009-11-29CVE-2009-4083NetworkMediumNone Requ...
4.32009-09-28CVE-2009-3444NetworkMediumNone Requ...
5.12009-04-24CVE-2009-1409NetworkHighNone Requ...
4.32009-02-19CVE-2008-6208NetworkMediumNone Requ...
6.52008-12-03CVE-2008-5320NetworkLowRequires ...
6.82008-04-29CVE-2008-2020NetworkMediumNone Requ...

CWE : Common Weakness Enumeration

44% (8)CWE-79Failure to Preserve Web Page Structure ('Cross-site Scripting')
22% (4)CWE-89Improper Sanitization of Special Elements used in an SQL Command ('...
11% (2)CWE-352Cross-Site Request Forgery (CSRF)
11% (2)CWE-264Permissions, Privileges, and Access Controls
5% (1)CWE-255Credentials Management
Hide | Show 1 More...
5% (1)CWE-78Improper Sanitization of Special Elements used in an OS Command ('O...

CAPEC : Common Attack Pattern Enumeration & Classification

CAPEC-59Session Credential Falsification through Prediction
CAPEC-112Brute Force
CAPEC-281Analytic Attacks

Open Source Vulnerability Database (OSVDB)

77042e107 CMS install_.php MySQL Server Name Parsing Remote PHP Code Execution
67367e107 submitnews.php submitnews_title Parameter XSS
65243e107 bbcode/ Access Control Check Weakness Arbitrary PHP Code Execution
65056e107 usersettings.php loginname Parameter Blacklist Weakness SQL Injection
63911e107 e107_plugins/content/content_manager.php content_heading Parameter XSS
Hide | Show 18 More...
63910e107 Crafted .php.filetypesphp Image File Upload Arbitrary PHP Code Execution
60829e107 e107_admin/mailout.php Unspecified Parameter XSS
60828e107 e107_admin/links.php Unspecified Parameter XSS
60827e107 e107_admin/frontpage.php Unspecified Parameter XSS
60826e107 e107_admin/users_extended.php Unspecified Parameter XSS
60825e107 e107_admin/download.php Unspecified Parameter XSS
60824e107 e107_admin/cpage.php Unspecified Parameter XSS
60823e107 e107_admin/banner.php Unspecified Parameter XSS
60822e107 e107_admin/banlist.php Unspecified Parameter XSS
60821e107 e107_admin/newpost.php Unspecified Parameter XSS
60820e107 e107_admin/usersettings.php Unspecified Parameter XSS
60819e107 e107_admin/submitnews.php Unspecified Parameter XSS
60608e107 Search Feature Unspecified SQL Injection
58363e107 email.php HTTP Referer Header XSS
53812e107 usersettings.php hide Parameter SQL Injection
52406e107 submitnews.php Multiple Parameter XSS
49207e107 usersettings.php ue[] Array Parameter SQL Injection
44982PHP-Nuke CAPTCHA code_bg.jpg PHP ImageString Function Image Checksum Generati...

OpenVAS Exploits

2010-05-25Name : e107 BBCode Arbitrary PHP Code Execution Vulnerability
File : nvt/gb_e107_40252.nasl
2010-05-04Name : FreeBSD Ports: e107
File : nvt/freebsd_e107.nasl
2009-10-08Name : e107 'Referer' Header Cross-Site Scripting Vulnerability
File : nvt/gb_e107_referer_xss_vuln.nasl

Nessus® Vulnerability Scanner

2013-05-13Name : The remote web server hosts a PHP script that is affected by a cross-site scr...
File : e107_content_preset_xss.nasl - Type : ACT_ATTACK
2010-05-21Name : The remote web server contains a PHP script that allows arbitrary code execut...
File : e107_bbcode_php_code_execution.nasl - Type : ACT_ATTACK
2010-04-21Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_a4746a864c8911df83fb0015587e2cc1.nasl - Type : ACT_GATHER_INFO
2009-12-10Name : A PHP script on the remote web server is affected by a cross-site scripting v...
File : e107_submitnews_xss.nasl - Type : ACT_ATTACK