CVE-2016-10378

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-10378

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10378.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2016-10378

Published

2017-05-29T19:29:00.250Z

Modified

2025-11-14T04:30:57.948616Z

Severity

7.2 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVisibility function.

References

http://code610.blogspot.com/2016/09/sql-injection-in-latest-e107-cms.html

Affected packages

Git / github.com/e107inc/e107

Affected ranges

Type: GIT
Repo: https://github.com/e107inc/e107
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

5f005b50b2ab5aa3afa69a37e33f4b2f86f8e4ea

Affected versions

v2.*

v2.0-alpha2

v2.0-beta1

v2.0.0

v2.0alpha

v2.1

v2.1.0

v2.1.1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10378.json"