Security Advisory
CVE-2016-10753
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC.