CVE-2026-72599 in e107
Riassunto
di MITRE • 11/08/2026
An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, modify, or delete all database contents including administrator credentials.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.