CVE-2004-2042: e107

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php.

Affected products

• e107 e107: version 0.615 only; version 0.615a only

Published 2004-05-29. Last modified 2026-06-16.