CVE-2026-55572
Deferred Deferred - Pending Action

SQL Injection in e107 CMS via alt_auth Plugin

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: GitHub, Inc.

Description
e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107_plugins/alt_auth/otherdb_auth.php and e107_plugins/alt_auth/e107db_auth.php. The login() methods execute those strings with PDO::query() before effective sanitization, so an unauthenticated user can inject SQL when alt_auth is installed and either backend is configured with a live external database connection. The injection can expose or modify data available to the configured database account, and query failures can additionally disclose the generated query through the debug-message path. This issue is fixed in version 2.3.7.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-16
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-55572
EUVD
EUVD-2026-101531

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
e107inc e107 < 2.3.7

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-55572 is a critical SQL injection vulnerability in the alt_auth plugin of the e107 CMS. It affects versions up to and including 2.4 dev. The flaw exists in the otherdb and e107db authentication backends where the login username is directly interpolated into SQL queries without proper sanitization or prepared statements. This allows unauthenticated attackers to inject malicious SQL code via the login form.

Detection Guidance

Check if the alt_auth plugin is installed and enabled in your e107 CMS. Inspect the login form for the alt_auth plugin and verify if the username input is directly interpolated into SQL queries without sanitization. Look for debug messages that may reveal SQL query errors.

Impact Analysis

An attacker could exploit this vulnerability to extract data from the external database or perform unauthorized actions depending on the database account's privileges. The impact includes blind or error-based data extraction from the external database, with query details potentially disclosed in debug messages.

Compliance Impact

This SQL injection vulnerability in e107's alt_auth plugin could lead to unauthorized data exposure or modification in external databases, potentially violating GDPR's data protection requirements or HIPAA's safeguards for protected health information if such data is processed by the vulnerable system.

Mitigation Strategies

Upgrade e107 to version 2.3.7 or later to address the vulnerability. If upgrading is not immediately possible, disable the alt_auth plugin or restrict access to the login form until the patch is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55572. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart