CVE-2011-4921: SQL Injection
Published Jan 4, 2012
·Updated
SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected Software
1 affected component
e107 e107=0.7.26
Event History
Jan 4, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4921?
CVE-2011-4921 has a medium severity rating due to the potential for SQL injection attacks.
2
How do I fix CVE-2011-4921?
To fix CVE-2011-4921, upgrade to e107 version 1.0.0 or later where the vulnerability has been addressed.
3
What versions of e107 are affected by CVE-2011-4921?
CVE-2011-4921 affects e107 version 0.7.26 and possibly other versions prior to 1.0.0.
4
Can CVE-2011-4921 be exploited remotely?
Yes, CVE-2011-4921 can be exploited remotely by attackers to execute arbitrary SQL commands.
5
What parameters are involved in CVE-2011-4921?
The vulnerability in CVE-2011-4921 specifically involves the 'username' parameter in usersettings.php.