Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 102

Export CSV
CVE-2018-11127

e107 2.1.7 has CSRF resulting in arbitrary user deletion.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
E107
Products
E107
CVE-2016-10753

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC.

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
E107
Products
E107