Description
Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installation script is not removed, allows remote attackers to inject arbitrary PHP code into e107_config.php via a crafted MySQL server name.
Remediation
References
Related Vulnerabilities
MySQL CVE-2014-2419 Vulnerability (CVE-2014-2419)
WordPress Plugin Data Tables Generator by Supsystic Cross-Site Scripting (1.10.19)
WordPress Plugin Livefyre Comments 3 Cross-Site Scripting (4.1.4)
WordPress Plugin Simple Image Sizes Unspecified Vulnerability (2.2.4)
LimeSurvey Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-16187)