PT-2018-13540

CVE-2018-16389

Published

2018-09-12

Updated

2018-11-02

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions e107 version 2.1.8

Description The issue allows SQL injection via the old ip parameter in the e107 admin/banlist.php file.

Recommendations For version 2.1.8, avoid using the old ip parameter in the affected API endpoint until the issue is resolved.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾