Description
SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User Fields" is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hide parameter, a different vector than CVE-2005-4224 and CVE-2008-5320.
Remediation
References
Related Vulnerabilities
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3225)
Java Unspesificed Vulnerability (CVE-2019-2821)
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2017-3730)
PHP Other Vulnerability (CVE-2005-3054)
WordPress Plugin WP Code Highlight.js Cross-Site Request Forgery (0.6.2)