← Back

E107

e107

82 CVEs • 6 products

Products (6)

Click to collapse
Toggle
E107
e107
E107 Cms
e107_cms
Chatbox Plugin
chatbox_plugin
My Gallery
my_gallery

CVEs (82)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1E107
1E107
Apr 16, 2026
May 21, 2004
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php.
1E107
1E107
Apr 16, 2026
Oct 29, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages fail to load) via HTML in the Name field, which prevents the main.php form from being loaded.