CVE-2006-2416

SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[‘cookie_name’].

Date published : 2006-05-16

http://www.securityfocus.com/bid/17966

http://www.securityfocus.com/archive/1/433938/100/0/threaded