Description
Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin KNR Author List Widget 'listItem[]' Parameter SQL Injection (2.0.0)
WebLogic CVE-2021-2157 Vulnerability (CVE-2021-2157)
WordPress Plugin Contact Form Submissions SQL Injection (1.6.4)
WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection (2.1.77)
WordPress Plugin WooCommerce Salesforce Integration Cross-Site Scripting (1.5.8)