Browse CVEs

HIGH 7.2 CVE-2022-50939 e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated administrators to override arbitrary server files thro… E107 No fix yet Fix from $1,9502026-01-13 HIGH 7.2 CVE-2022-50916 e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server files through the Media Manag… E107 No fix yet Fix from $1,9502026-01-13 HIGH 7.2 CVE-2022-50907 e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrative users to bypass upload restrictions and execute … E107 No fix yet Fix from $1,9502026-01-13 MEDIUM 6.1 CVE-2022-50905 e107 CMS version 3.2.1 contains multiple vulnerabilities that allow cross-site scripting (XSS) attacks. The first vulnerability is a reflected XSS th… E107 No fix yet Fix from $1,6002026-01-13 HIGH 8.1 CVE-2025-11941 A vulnerability was detected in e107 CMS up to 2.3.3. This impacts an unknown function of the file /e107_admin/image.php?mode=main&action=avatar of t… E107 after 2.3.3 Fix from $1,9502025-10-19 MEDIUM 6.5 CVE-2025-61505 e107 CMS thru 2.3.3 are vulnerable to insecure deserialization in the `install.php` script. The script processes user-controlled input in the `previo… E107 after 2.3.3 Fix from $1,6002025-10-10 MEDIUM 5.4 CVE-2023-43873 A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Name fil… E107 Cms No fix yet Fix from $1,6002023-09-28 MEDIUM 5.4 CVE-2023-43874 Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the C… E107 Cms No fix yet Fix from $1,6002023-09-28 MEDIUM 5.4 CVE-2023-36121 Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary code via the description function in the SEO project. E107 No fix yet Fix from $1,6002023-08-02 HIGH 8.8 CVE-2021-27885 usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism. E107 after 2.3.0 Fix from $1,9502021-03-02 MEDIUM 6.1 CVE-2018-11734 In e107 v2.1.7, output without filtering results in XSS. E107 Mitigation only Fix from $1,6002019-07-10 HIGH 8.8 CVE-2016-10753 e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC. E107 No fix yet Fix from $1,9502019-05-24 HIGH 7.2 CVE-2018-16388 e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg … E107 Patch available Fix from $1,9502018-09-12 MEDIUM 6.5 CVE-2018-16389 e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter. E107 Patch available Fix from $1,6002018-09-12 MEDIUM 6.1 CVE-2018-16381 e107 2.1.8 has XSS via the e107_admin/users.php?mode=main&action=list user_loginname parameter. E107 No fix yet Fix from $1,6002018-09-05 HIGH 8.8 CVE-2018-15901 e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators. E107 No fix yet Fix from $1,9502018-08-28 MEDIUM 6.5 CVE-2018-11127 e107 2.1.7 has CSRF resulting in arbitrary user deletion. E107 Mitigation only Fix from $1,6002018-05-15 HIGH 7.2 CVE-2016-10378 e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVis… E107 No fix yet Fix from $1,9502017-05-29 MEDIUM 6.5 CVE-2017-8098 e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A malicious web page can use forge… E107 Patch available Fix from $1,6002017-04-24 MEDIUM 6.8 CVE-2014-9459 Cross-site request forgery (CSRF) vulnerability in the AdminObserver function in e107_admin/users.php in e107 2.0 alpha2 allows remote attackers to h… E107 Patch available Fix from $1,6002015-01-02 MEDIUM 6.8 CVE-2012-6433 Cross-site request forgery (CSRF) vulnerability in e107_admin/newspost.php in e107 1.0.1 allows remote attackers to hijack the authentication of admi… E107 Patch available Fix from $1,6002013-01-03 MEDIUM 6.8 CVE-2012-6434 Multiple cross-site request forgery (CSRF) vulnerabilities in e107_admin/download.php in e107 1.0.2 allow remote attackers to hijack the authenticati… E107 Patch available Fix from $1,6002013-01-03 MEDIUM 6.8 CVE-2011-4946 SQL injection vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands via the … E107 after 0.7.24 Fix from $1,6002012-08-31 MEDIUM 6.8 CVE-2011-4947 Cross-site request forgery (CSRF) vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to hijack the authenti… E107 after 0.7.24 Fix from $1,6002012-08-31 MEDIUM 6.0 CVE-2010-5084 The cross-site request forgery (CSRF) protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the ad… E107 after 0.7.22 Fix from $1,6002012-02-14 MEDIUM 5.1 CVE-2011-4921 SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrar… E107 Mitigation only Fix from $1,6002012-01-04 HIGH 7.5 CVE-2011-1513EPSS 6% Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installation script is not removed, al… E107 after 0.7.24 Fix from $1,9502011-11-04 MEDIUM 5.0 CVE-2011-3731 e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an er… E107 No fix yet Fix from $1,6002011-09-23 HIGH 7.5 CVE-2010-2098 Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the lo… E107 after 0.7.20 Fix from $1,9502010-05-27 HIGH 7.5 CVE-2010-2099 bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows re… E107 after 0.7.20 Fix from $1,9502010-05-27