Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL commands via (1) the email, hideemail, image, realname, signature, timezone, and xupexist parameters in signup.php, (2) the content_comment, content_rating, and content_summary parameters in subcontent.php, (3) the download_category and file_demo in upload.php, and (4) the email, hideemail, user_timezone, and user_xup parameters in usersettings.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
e107 SQL注入漏洞
Vulnerability Description
e107 0.7 中存在多个"潜在"SQL注入漏洞，远程攻击者可能通过(1)signup.php中的email、hideemail、image、realname、signature、timezone和xupexist参数，(2) subcontent.php中的content_comment、content_rating和content_summary参数，(3) upload.php中的download_category和file_demo参数和(4)usersettings.php中的email、 h
CVSS Information
N/A
Vulnerability Type
N/A