CVE-2009-4084: e107

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the search feature in e107 0.7.16 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• e107 e107: up to and including 0.7.16; version 0.6_10 only; version 0.6_11 only; version 0.6_12 only; version 0.6_13 only; version 0.6_14 only; …

Published 2009-11-29. Last modified 2026-06-16.