SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref['cookie_name']. Update to version 0.7.4.
http://e107.org/edownload.php
Publication date: Tue, 16 May 2006 15:02:00 +0000