Description

e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server files through the Media Manager import functionality. Attackers can exploit the upload mechanism by manipulating the upload URL parameter to overwrite existing files like top.php in the web application directory.

Remediation

References

CVE-2022-50916

Related Vulnerabilities

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3747)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Cross-Site Scripting Vulnerabilities (2.0.27)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2958)

PostgreSQL Resource Management Errors Vulnerability (CVE-2007-4772)

Oracle JRE Improper Access Control Vulnerability (CVE-2025-61748)

Severity

High

Classification

CVE-2022-50916 CWE-434 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities