CVE:CVE-2009-1409
CNNVD:CNNVD-200904-478
e107是用php编写的内容管理系统。 
e107的usersettings.php脚本没有正确地过滤对hide[]密钥所传送的输入，如果magic_quotes_gpc = off的话远程攻击者就可以通过提交恶意请求执行SQL注入攻击。以下是usersettings.php中的有漏洞代码段：
433 - 441行： 
 if($ue_fields) {
    $hidden_fields = implode("^", array_keys($_POST[' hide' ])); <------ {1}
     if($hidden_fields != "")
     {
     $hidden_fields = "^".$hidden_fields."^";  
     }
     $ue_fields .= ", user_hidden_fields = ' ".$hidden_fields."' "; <---- {2}
   }
470 - 476行：
  if($ue_fields) 
  {
    [etc..]
    $sql->db_Update("user_extended", $ue_fields." WHERE user_extended_id = ' ".intval($inp)."' ");
  }  
ue[] POST变量需要有效的密钥，如aim、msn或其他user_extended_fields(@fields数组)。
solution:Upgrade e107 e107 to a higher version than 0.6_10,0.6_11,0.6_12,0.6_13,0.6_14,0.6_15,0.6_15a,0.7,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.13,0.545,0.547_beta,0.548_beta,0.549_beta,0.551_beta,0.552_beta,0.553_beta,0.554,0.554_beta,0.555_beta,0.600,0.601,0.602,0.603,0.604,0.605,0.606,0.607,0.608,0.609,0.610,0.611,0.612,0.613,0.614,0.615,0.615a,0.616,0.617,0.6171,0.6172,0.6173,0.6174,0.6175,1.0.1,5.1,5.2,5.3_beta,5.3_beta2,5.04,5.4_beta1,5.4_beta3,5.4_beta4,5.4_beta5,5.4_beta6,5.05,5.21,and avoid the version 0.6_10,0.6_11,0.6_12,0.6_13,0.6_14,0.6_15,0.6_15a,0.7,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.13,0.545,0.547_beta,0.548_beta,0.549_beta,0.551_beta,0.552_beta,0.553_beta,0.554,0.554_beta,0.555_beta,0.600,0.601,0.602,0.603,0.604,0.605,0.606,0.607,0.608,0.609,0.610,0.611,0.612,0.613,0.614,0.615,0.615a,0.616,0.617,0.6171,0.6172,0.6173,0.6174,0.6175,1.0.1,5.1,5.2,5.3_beta,5.3_beta2,5.04,5.4_beta1,5.4_beta3,5.4_beta4,5.4_beta5,5.4_beta6,5.05,5.21