Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the (1) linkopentype, (2) linkrender, (3) link_class, and (4) link_id parameters in (a) links.php; the (5) searchquery parameter in (b) users.php; and the (6) download_category_class parameter in (c) download.php. NOTE: an e107 developer has disputed the significance of the vulnerability, stating that If your admins are injecting you, you might want to reconsider their access.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| E107 | E107 | * | 0.7.5 (including) |
| E107 | E107 | 0.6_10 (including) | 0.6_10 (including) |
| E107 | E107 | 0.6_11 (including) | 0.6_11 (including) |
| E107 | E107 | 0.6_12 (including) | 0.6_12 (including) |
| E107 | E107 | 0.6_13 (including) | 0.6_13 (including) |
| E107 | E107 | 0.6_14 (including) | 0.6_14 (including) |
| E107 | E107 | 0.6_15 (including) | 0.6_15 (including) |
| E107 | E107 | 0.6_15a (including) | 0.6_15a (including) |
| E107 | E107 | 0.7 (including) | 0.7 (including) |
| E107 | E107 | 0.7.1 (including) | 0.7.1 (including) |
| E107 | E107 | 0.7.2 (including) | 0.7.2 (including) |
| E107 | E107 | 0.7.3 (including) | 0.7.3 (including) |
| E107 | E107 | 0.7.4 (including) | 0.7.4 (including) |
| E107 | E107 | 0.545 (including) | 0.545 (including) |
| E107 | E107 | 0.547_beta (including) | 0.547_beta (including) |
| E107 | E107 | 0.548_beta (including) | 0.548_beta (including) |
| E107 | E107 | 0.549_beta (including) | 0.549_beta (including) |
| E107 | E107 | 0.551_beta (including) | 0.551_beta (including) |
| E107 | E107 | 0.552_beta (including) | 0.552_beta (including) |
| E107 | E107 | 0.553_beta (including) | 0.553_beta (including) |
| E107 | E107 | 0.554 (including) | 0.554 (including) |
| E107 | E107 | 0.554_beta (including) | 0.554_beta (including) |
| E107 | E107 | 0.555_beta (including) | 0.555_beta (including) |
| E107 | E107 | 0.600 (including) | 0.600 (including) |
| E107 | E107 | 0.601 (including) | 0.601 (including) |
| E107 | E107 | 0.602 (including) | 0.602 (including) |
| E107 | E107 | 0.603 (including) | 0.603 (including) |
| E107 | E107 | 0.604 (including) | 0.604 (including) |
| E107 | E107 | 0.605 (including) | 0.605 (including) |
| E107 | E107 | 0.606 (including) | 0.606 (including) |
| E107 | E107 | 0.607 (including) | 0.607 (including) |
| E107 | E107 | 0.608 (including) | 0.608 (including) |
| E107 | E107 | 0.609 (including) | 0.609 (including) |
| E107 | E107 | 0.610 (including) | 0.610 (including) |
| E107 | E107 | 0.611 (including) | 0.611 (including) |
| E107 | E107 | 0.612 (including) | 0.612 (including) |
| E107 | E107 | 0.613 (including) | 0.613 (including) |
| E107 | E107 | 0.614 (including) | 0.614 (including) |
| E107 | E107 | 0.615 (including) | 0.615 (including) |
| E107 | E107 | 0.615a (including) | 0.615a (including) |
| E107 | E107 | 0.616 (including) | 0.616 (including) |
| E107 | E107 | 0.617 (including) | 0.617 (including) |
| E107 | E107 | 0.6171 (including) | 0.6171 (including) |
| E107 | E107 | 0.6172 (including) | 0.6172 (including) |
| E107 | E107 | 0.6173 (including) | 0.6173 (including) |
| E107 | E107 | 0.6174 (including) | 0.6174 (including) |
| E107 | E107 | 0.6175 (including) | 0.6175 (including) |