Description
SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User Fields" is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hide parameter, a different vector than CVE-2005-4224 and CVE-2008-5320.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2010-4423 Vulnerability (CVE-2010-4423)
Java Unspesificed Vulnerability (CVE-2018-14048)
Payara Files or Directories Accessible to External Parties Vulnerability (CVE-2022-45129)
Apache 2.x version older than 2.0.45
WordPress Plugin WordPress Email Template Designer-WP HTML Mail Cross-Site Scripting (3.0.9)