e107 CMS vulnerabilities
3 known vulnerabilities in e107 CMS from E107. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
e107 CMS: Improper Limitation of a Pathname to a Restricted Directory
e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated administrators to override arbitrary server files through path traversal. The vulnerability exists in the Media Manager's remote URL upload functionality (image.php)
- 7.2 High severity
e107 CMS: Unrestricted Upload of File with Dangerous Type
e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server files through the Media Manager import functionality. Attackers can exploit the upload mechanism by manipulating the upload URL parameter to
- 7.2 High severity
e107 CMS: Unrestricted Upload of File with Dangerous Type
e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrative users to bypass upload restrictions and execute PHP files. Attackers can upload malicious PHP files to parent directories by manipulating the upload URL parame