CVE-2016-10753

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC

published May 24, 2019

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01650 · 76.2th percentile
Published
2019-05-24T17:40Z
EPSS history
Timeline
  • 24 MAY 17:40Z
    e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC
    cvelistv5