CVE-2006-4757

CVE-2006-4757 describes multiple SQL injection vulnerabilities within the administrative section of e107 version 0.7.5. Specifically, authenticated administrative users can execute arbitrary SQL commands through various parameters in links.php, users.php, and download.php. The vulnerability has a CVSS score of 4.6 (Medium), indicating a network-based attack with high access complexity requiring authenticated user privileges, and leading to partial confidentiality, integrity, and availability impacts. A developer noted that the significance is limited as it requires a malicious administrator. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of older vulnerabilities.