Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

e107

e107 is a free and open-source content management system (CMS) that allows you to manage and publish your content online with ease.

Official Site:

https://e107.org/

Severity Summary:

Critical: 1 High: 17 Medium: 49 Low: 1
Reference
Title
Severity
CVE-2008-1989
e107 Improper Control of Generation of Code (Code Injection) Vulnerability
Critical
CVE-2005-3521
e107 Other Vulnerability
High
CVE-2009-4084
e107 Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2005-4224
e107 Other Vulnerability
High
CVE-2010-2099
e107 Permissions Privileges and Access Controls Vulnerability
High
CVE-2010-2098
e107 Other Vulnerability
High
CVE-2005-2559
e107 Other Vulnerability
High
CVE-2005-1949
e107 Other Vulnerability
High
CVE-2005-1966
e107 Other Vulnerability
High
CVE-2004-2042
e107 Other Vulnerability
High
CVE-2006-4548
e107 Other Vulnerability
High
CVE-2016-10378
e107 Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2018-15901
e107 Cross-Site Request Forgery (CSRF) Vulnerability
High
CVE-2021-27885
e107 Inadequate Encryption Strength Vulnerability
High
CVE-2018-16388
e107 Unrestricted Upload of File with Dangerous Type Vulnerability
High
CVE-2006-5786
e107 Other Vulnerability
High
CVE-2016-10753
e107 Deserialization of Untrusted Data Vulnerability
High
CVE-2011-1513
e107 Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
High
CVE-2006-3259
e107 Other Vulnerability
Medium
CVE-2006-2416
e107 Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2006-4757
e107 Other Vulnerability
Medium
CVE-2006-2590
e107 Other Vulnerability
Medium
CVE-2006-2591
e107 Other Vulnerability
Medium
CVE-2006-4794
e107 Other Vulnerability
Medium
CVE-2018-11734
e107 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2006-0857
e107 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2006-0682
e107 Other Vulnerability
Medium
CVE-2005-4051
e107 Other Vulnerability
Medium
CVE-2005-3594
e107 Other Vulnerability
Medium
CVE-2005-2805
e107 Other Vulnerability
Medium