CVE-2018-16389

e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter.

• CWE-89

• https://gist.github.com/ommadawn46/51e08e13e6980dcbcffb4322c29b93d0Third Party Advisory
• https://github.com/e107inc/e107/commit/ec483e9379aa622bfcc1b853b189c74288771f27Patch, Vendor Advisory
• https://gist.github.com/ommadawn46/51e08e13e6980dcbcffb4322c29b93d0Third Party Advisory
• https://github.com/e107inc/e107/commit/ec483e9379aa622bfcc1b853b189c74288771f27Patch, Vendor Advisory

Published

Sep 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16382Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in …
• CVE-2018-16384A SQL injection bypass (aka PL1 bypass) exists in OWASP ModS…7.5
• CVE-2018-16385ThinkPHP before 5.1.23 allows SQL Injection via the public/i…
• CVE-2018-16386An issue was discovered in SWIFT Alliance Web Platform 7.1.2…
• CVE-2018-16387An issue was discovered in Elefant CMS before 2.0.5. There i…
• CVE-2018-16388e107_web/js/plupload/upload.php in e107 2.1.8 allows remote …
• CVE-2018-1639The Report Builder of Jazz Reporting Service 5.0 through 5.0…4.3
• CVE-2018-16391Several buffer overflows when handling responses from a Musc…
• CVE-2018-16392Several buffer overflows when handling responses from a TCOS…
• CVE-2018-16393Several buffer overflows when handling responses from a Gems…
• CVE-2018-16395An issue was discovered in the OpenSSL library in Ruby befor…
• CVE-2018-16396An issue was discovered in Ruby before 2.3.8, 2.4.x before 2…