CVE-2006-4757: SQL Injection
Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the (1) linkopentype, (2) linkrender, (3) linkclass, and (4) linkid parameters in (a) links.php; the (5) searchquery parameter in (b) users.php; and the (6) downloadcategoryclass parameter in (c) download.php. NOTE: an e107 developer has disputed the significance of the vulnerability, stating that "If your admins are injecting you, you might want to reconsider their access."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4757?
CVE-2006-4757 has a moderate severity rating due to its ability to allow remote authenticated users to execute arbitrary SQL commands.
How do I fix CVE-2006-4757?
To fix CVE-2006-4757, update your e107 CMS installation to version 0.7.6 or later, which addresses the SQL injection vulnerabilities.
What versions of e107 CMS are affected by CVE-2006-4757?
CVE-2006-4757 affects e107 CMS versions 0.7.5 and earlier, as well as specific versions from 0.6.10 to 0.7.4.
What are the exploitation methods for CVE-2006-4757?
Attackers can exploit CVE-2006-4757 through SQL injection via parameters such as linkopentype, linkrender, link_class, and link_id in the links.php file.
Who can be targeted by CVE-2006-4757?
CVE-2006-4757 targets remote authenticated administrative users of the e107 CMS, potentially compromising the entire database.