CVE-2018-16389

MEDIUM

E107 - SQL Injection

Title source: rule

e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter.

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

Third Party Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0027

EPSS Percentile 50.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-89

Status published

Products (1)

e107/e107 2.1.8

Published Sep 12, 2018

Tracked Since Feb 18, 2026