Total vulnerabilities in the database
e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter.
CVSS v3:
CVSS v2:
CWEs:
OWASP TOP 10: