Description
Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary code by uploading a .php.filetypesphp file. NOTE: the vendor disputes the significance of this issue, noting that "an odd set of preferences and a missing file" are required.
Remediation
References
Related Vulnerabilities
SharePoint Untrusted Pointer Dereference Vulnerability (CVE-2026-40367)
MySQL CVE-2018-2591 Vulnerability (CVE-2018-2591)
MySQL CVE-2022-21600 Vulnerability (CVE-2022-21600)
Apache Traffic Server CVE-2024-35296 Vulnerability (CVE-2024-35296)
WordPress Plugin Travelpayouts:All Travel Brands in One Place Cross-Site Scripting (0.7.12)