Description
usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Ultimate Exporter Cross-Site Scripting (1.0)
WordPress Plugin Custom Searchable Data Entry System Security Bypass (1.7.1)
WordPress Plugin WordPress Access Areas Security Bypass (1.3.0)
WordPress Plugin Splashing Images Multiple Vulnerabilities (2.1)
Oracle Database Server CVE-2008-1818 Vulnerability (CVE-2008-1818)