CVE-2008-5320 - CVE House

Status published Medium CVE-2008-5320

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier...

6.5 CVSS

Vulnerability Description

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue[] parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5320

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from e107

View All →

CVE-2025-11941

e107 CMS Avatar image.php path traversal

Medium 5.3

CVE-2022-50916

e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file override

High 8.7

CVE-2022-50907

e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE

High 8.6

CVE-2022-50906

e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSS

Medium 4.8

CVE-2022-50905

e107 CMS v3.2.1 - Reflected XSS via Comment Flow

Medium 6.1

Affected Vendor

e107

View all reports →

Affected Software

e107

Vulnerable Versions:

0, 0.7, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.7.6, 0.7.7, 0.7.8, 0.7.9, 0.7.10, 0.7.11, 0.547_beta, 0.548_beta, 0.549_beta, 0.551_beta, 0.552_beta, 0.553_beta, 0.554_beta, 0.555_beta, 0.600, 0.601, 0.602, 0.603, 0.604, 0.605, 0.606, 0.607, 0.608, 0.609, 0.610, 0.611, 0.612, 0.613, 0.614, 0.615, 0.615a, 0.616, 0.617, 0.6171, 0.6172, 0.6173, 0.6174, 0.6175, 5.1, 5.3_beta, 5.3_beta2, 5.04, 5.4_beta1, 5.4_beta3, 5.4_beta4, 5.4_beta5, 5.4_beta6, 5.05, 5.21

Timeline

Official Publish: December 3rd, 2008

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.