Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2016-10378

Description

e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVisibility function.

POC

Reference

- http://code610.blogspot.com/2016/09/sql-injection-in-latest-e107-cms.html

Github

No PoCs found on GitHub currently.