PT-2004-2938 · E107 · E107

Janek Vind + 1 · Published 2004-05-29 · Updated 2017-07-11 · CVE-2004-2042

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions e107 version 0.615

Description The issue allows remote attackers to inject arbitrary SQL code and gain sensitive information. This can be achieved via the content parameter to "content.php", the content id parameter to "content.php", or the list parameter to "news.php".

Recommendations For e107 version 0.615, update to a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2004-2042

Affected Products

E107

References · 11

• 🔥 http://osvdb.org/6532 · Exploit
• 🔥 http://osvdb.org/6531 · Exploit
• 🔥 http://osvdb.org/6533 · Exploit
• 🔥 http://securityfocus.com/bid/10436 · Exploit
• 🔥 http://waraxe.us/index.php?modname=sa&id=31 · Exploit
• http://secunia.com/advisories/11740 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2042 · Security Note
• http://marc.info/?l=full-disclosure&m=108586723116427&w=2 · Note
• http://marc.info/?l=bugtraq&m=108588043007224&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2042 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16283 · Note