VulnerabilityModified
CVE-2008-5320
SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue[] parameter.
MEDIUM 6.5EPSS 1.94%
Does this matter?
Lower severity and a low EPSS score (1.94%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue[] parameter.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 1.94% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- e107/e107
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/32322Vendor Advisory
- http://securityreason.com/securityalert/4683
- http://www.securityfocus.com/bid/31821Exploit
- http://www.vupen.com/english/advisories/2008/2860
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45967
- https://www.exploit-db.com/exploits/6791
- http://secunia.com/advisories/32322Vendor Advisory
- http://securityreason.com/securityalert/4683
- http://www.securityfocus.com/bid/31821Exploit
- http://www.vupen.com/english/advisories/2008/2860
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45967
- https://www.exploit-db.com/exploits/6791
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.