Description
usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.
Remediation
References
Related Vulnerabilities
osCommerce Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2002-1991)
WordPress Plugin DukaPress TimThumb Arbitrary File Upload (2.3.2)
WordPress Plugin The Holiday Calendar Cross-Site Scripting (1.11.2)
Internet Information Services Other Vulnerability (CVE-2002-1181)
WordPress Plugin LearnPress-WordPress LMS SQL Injection (3.2.6.7)