CVE-2010-2098: e107

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter.

Affected products

• e107 e107: up to and including 0.7.20; version 0.6_10 only; version 0.6_11 only; version 0.6_12 only; version 0.6_13 only; version 0.6_14 only; …

Published 2010-05-27. Last modified 2026-06-16.