Efiction

efiction

Vendor: Efiction • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-2754 1Efiction 1Efiction Apr 23, 2026 Jun 18, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter.
CVE-2007-1118 1Efiction 1Efiction Apr 23, 2026 Feb 27, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path_to_smf parameter to (1) bridges/SMF/logout.php or (2) get_sessio...Show more Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path_to_smf parameter to (1) bridges/SMF/logout.php or (2) get_session_vars.php.Show less
CVE-2006-4427 1Efiction 1Efiction Apr 16, 2026 Aug 29, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".