mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-09 19:17:37 +02:00
739 B
739 B
CVE-2016-10378
Description
e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVisibility function.
POC
Reference
- http://code610.blogspot.com/2016/09/sql-injection-in-latest-e107-cms.html
- http://code610.blogspot.com/2016/09/sql-injection-in-latest-e107-cms.html
Github
No PoCs found on GitHub currently.