Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary code by uploading a .php.filetypesphp file. NOTE: the vendor disputes the significance of this issue, noting that an odd set of preferences and a missing file are required.
Name | Vendor | Start Version | End Version |
---|---|---|---|
E107 | E107 | * | 0.7.19 (including) |
E107 | E107 | 0.7 (including) | 0.7 (including) |
E107 | E107 | 0.7.1 (including) | 0.7.1 (including) |
E107 | E107 | 0.7.2 (including) | 0.7.2 (including) |
E107 | E107 | 0.7.3 (including) | 0.7.3 (including) |
E107 | E107 | 0.7.4 (including) | 0.7.4 (including) |
E107 | E107 | 0.7.5 (including) | 0.7.5 (including) |
E107 | E107 | 0.7.6 (including) | 0.7.6 (including) |
E107 | E107 | 0.7.7 (including) | 0.7.7 (including) |
E107 | E107 | 0.7.8 (including) | 0.7.8 (including) |
E107 | E107 | 0.7.9 (including) | 0.7.9 (including) |
E107 | E107 | 0.7.10 (including) | 0.7.10 (including) |
E107 | E107 | 0.7.11 (including) | 0.7.11 (including) |
E107 | E107 | 0.7.12 (including) | 0.7.12 (including) |
E107 | E107 | 0.7.13 (including) | 0.7.13 (including) |
E107 | E107 | 0.7.14 (including) | 0.7.14 (including) |
E107 | E107 | 0.7.15 (including) | 0.7.15 (including) |
E107 | E107 | 0.7.16 (including) | 0.7.16 (including) |
E107 | E107 | 0.7.17 (including) | 0.7.17 (including) |
E107 | E107 | 0.7.18 (including) | 0.7.18 (including) |
E107 | E107 | 0.545 (including) | 0.545 (including) |
E107 | E107 | 0.547-beta (including) | 0.547-beta (including) |
E107 | E107 | 0.548-beta (including) | 0.548-beta (including) |
E107 | E107 | 0.549-beta (including) | 0.549-beta (including) |
E107 | E107 | 0.551-beta (including) | 0.551-beta (including) |
E107 | E107 | 0.552-beta (including) | 0.552-beta (including) |
E107 | E107 | 0.553-beta (including) | 0.553-beta (including) |
E107 | E107 | 0.554 (including) | 0.554 (including) |
E107 | E107 | 0.554-beta (including) | 0.554-beta (including) |
E107 | E107 | 0.555-beta (including) | 0.555-beta (including) |
E107 | E107 | 0.600 (including) | 0.600 (including) |
E107 | E107 | 0.601 (including) | 0.601 (including) |
E107 | E107 | 0.602 (including) | 0.602 (including) |
E107 | E107 | 0.603 (including) | 0.603 (including) |
E107 | E107 | 0.604 (including) | 0.604 (including) |
E107 | E107 | 0.605 (including) | 0.605 (including) |
E107 | E107 | 0.606 (including) | 0.606 (including) |
E107 | E107 | 0.607 (including) | 0.607 (including) |
E107 | E107 | 0.608 (including) | 0.608 (including) |
E107 | E107 | 0.609 (including) | 0.609 (including) |
E107 | E107 | 0.610 (including) | 0.610 (including) |
E107 | E107 | 0.611 (including) | 0.611 (including) |
E107 | E107 | 0.612 (including) | 0.612 (including) |
E107 | E107 | 0.613 (including) | 0.613 (including) |
E107 | E107 | 0.614 (including) | 0.614 (including) |
E107 | E107 | 0.615 (including) | 0.615 (including) |
E107 | E107 | 0.615a (including) | 0.615a (including) |
E107 | E107 | 0.616 (including) | 0.616 (including) |
E107 | E107 | 0.617 (including) | 0.617 (including) |
E107 | E107 | 0.6171 (including) | 0.6171 (including) |
E107 | E107 | 0.6172 (including) | 0.6172 (including) |
E107 | E107 | 0.6173 (including) | 0.6173 (including) |
E107 | E107 | 0.6174 (including) | 0.6174 (including) |
E107 | E107 | 0.6175 (including) | 0.6175 (including) |
E107 | E107 | 5.1 (including) | 5.1 (including) |
E107 | E107 | 5.3-beta (including) | 5.3-beta (including) |
E107 | E107 | 5.3-beta2 (including) | 5.3-beta2 (including) |
E107 | E107 | 5.04 (including) | 5.04 (including) |
E107 | E107 | 5.4-beta1 (including) | 5.4-beta1 (including) |
E107 | E107 | 5.4-beta2 (including) | 5.4-beta2 (including) |
E107 | E107 | 5.4-beta3 (including) | 5.4-beta3 (including) |
E107 | E107 | 5.4-beta4 (including) | 5.4-beta4 (including) |
E107 | E107 | 5.4-beta5 (including) | 5.4-beta5 (including) |
E107 | E107 | 5.4-beta6 (including) | 5.4-beta6 (including) |
E107 | E107 | 5.05 (including) | 5.05 (including) |
E107 | E107 | 5.21 (including) | 5.21 (including) |