Description

e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter.

Remediation

References

CVE-2018-16389

Related Vulnerabilities

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6627)

Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-18033)

Oracle JRE CVE-2012-1716 Vulnerability (CVE-2012-1716)

WordPress Plugin Ultimate Addons for Beaver Builder Cross-Site Scripting (1.24.3)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-2666)

Severity

Medium

Classification

CVE-2018-16389 CWE-138 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities