CVE-2004-2042

CVE-2004-2042 describes multiple SQL injection vulnerabilities in e107 version 0.615. Attackers can exploit these flaws by injecting malicious SQL code through the 'content' and 'content_id' parameters in content.php, or the 'list' parameter in news.php. This vulnerability carries a CVSS score of 7.5, indicating high severity, as it allows unauthenticated remote attackers to gain sensitive information, leading to potential compromise of data confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, the potential for data exposure makes this a notable risk for affected systems.