Dhananjay Bajaj

2 exploits Active since Aug 2018

CVE-2018-15901 WRITEUP HIGH STUB

E107 - CSRF

e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators.

CVSS 8.8

View Code

CVE-2018-16381 WRITEUP MEDIUM STUB

E107 - XSS

e107 2.1.8 has XSS via the e107_admin/users.php?mode=main&action=list user_loginname parameter.

CVSS 6.1

View Code