CVE:CVE-2008-5320
CNNVD:CNNVD-200812-040
e107是用PHP编写的内容管理系统，使用流行的开放源码MySQL数据库进行内容存储。
e107 0.7.13及其早期版本的usersettings.php中存在SQL注入漏洞。远程验证用户可以借助ue[]参数，执行任意SQL指令。
solution:Upgrade e107 e107 to a higher version than 0.7.13,0.7,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.547_beta,0.548_beta,0.549_beta,0.551_beta,0.552_beta,0.553_beta,0.554_beta,0.555_beta,0.600,0.601,0.602,0.603,0.604,0.605,0.606,0.607,0.608,0.609,0.610,0.611,0.612,0.613,0.614,0.615,0.615a,0.616,0.617,0.6171,0.6172,0.6173,0.6174,0.6175,5.1,5.3_beta,5.3_beta2,5.04,5.4_beta1,5.4_beta3,5.4_beta4,5.4_beta5,5.4_beta6,5.05,5.21,and avoid the version (,0.7.13],0.7,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.547_beta,0.548_beta,0.549_beta,0.551_beta,0.552_beta,0.553_beta,0.554_beta,0.555_beta,0.600,0.601,0.602,0.603,0.604,0.605,0.606,0.607,0.608,0.609,0.610,0.611,0.612,0.613,0.614,0.615,0.615a,0.616,0.617,0.6171,0.6172,0.6173,0.6174,0.6175,5.1,5.3_beta,5.3_beta2,5.04,5.4_beta1,5.4_beta3,5.4_beta4,5.4_beta5,5.4_beta6,5.05,5.21