CVE-2016-10378 e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVisibility function.
HighCVSS 7.2
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVisibility function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| e107 | = 2.1.1 | No fix listed |
References
- code610.blogspot.com exploit third-party-advisory