E107 vulnerabilities

Products

• E107 78
• Cms 6
• Cms 2

Newest

• e107 e107 e107 - SQL Injection CVE-2026-72599 9.8 CriticalAugust 11, 2026
• e107 cms e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme Upload CVE-2021-47937 8.7 HighMay 10, 2026
• e107, e107 cms +1 more e107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File Override CVE-2022-50939 8.6 HighJanuary 13, 2026
• e107, e107 cms +1 more e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file override CVE-2022-50916 8.7 HighJanuary 13, 2026
• e107, e107 cms +1 more e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE CVE-2022-50907 8.6 HighJanuary 13, 2026
• e107, e107 cms +1 more e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSS CVE-2022-50906 4.8 MediumJanuary 13, 2026
• e107, e107 cms +1 more e107 CMS v3.2.1 - Reflected XSS via Comment Flow CVE-2022-50905 6.1 MediumJanuary 13, 2026
• e107 cms, e107 +1 more e107 CMS Avatar image.php path traversal CVE-2025-11941 5.3 MediumOctober 19, 2025
• e107 e107 CMS thru 2.3.3 are vulnerable to insecure deserialization in the `install.php` script. The... CVE-2025-61505 Public exploit 6.5 MediumOctober 10, 2025
• e107 cms Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to... CVE-2023-43874 Public exploit 5.4 MediumSeptember 28, 2023
• e107 cms A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute... CVE-2023-43873 Public exploit 5.4 MediumSeptember 28, 2023
• e107 Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary... CVE-2023-36121 5.4 MediumAugust 1, 2023
• e107 usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism. CVE-2021-27885 Public exploit 8.8 HighMarch 2, 2021
• e107 In e107 v2.1.7, output without filtering results in XSS. CVE-2018-11734 6.1 MediumJuly 10, 2019
• e107 An issue was discovered in e107 v2.1.9. There is a XSS attack on e107_admin/comment.php. CVE-2018-17423 4.8 MediumJune 19, 2019
• e107 e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php... CVE-2016-10753 8.8 HighMay 24, 2019
• e107 e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used=1&id= for... CVE-2018-17081 Public exploit 4.3 MediumSeptember 26, 2018
• e107 e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter. CVE-2018-16389 6.5 MediumSeptember 12, 2018
• e107 e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP... CVE-2018-16388 7.2 HighSeptember 12, 2018
• e107 e107 2.1.8 has XSS via the e107_admin/users.php?mode=main&action=list user_loginname parameter. CVE-2018-16381 6.1 MediumSeptember 5, 2018
• e107 e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of... CVE-2018-15901 8.8 HighAugust 28, 2018
• e107 e107 2.1.7 has CSRF resulting in arbitrary user deletion. CVE-2018-11127 6.5 MediumMay 15, 2018
• e107 e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter... CVE-2016-10378 7.2 HighMay 29, 2017
• e107 e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and... CVE-2017-8098 6.5 MediumApril 24, 2017
• e107 Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote... CVE-2015-1057 Public exploit 4.3 MediumJanuary 16, 2015
• e107 Cross-site scripting (XSS) vulnerability in e107_admin/filemanager.php in e107 1.0.4 allows... CVE-2015-1041 4.3 MediumJanuary 15, 2015
• e107 Cross-site request forgery (CSRF) vulnerability in the AdminObserver function in e107_admin/users... CVE-2014-9459 6.8 MediumJanuary 2, 2015
• e107 Cross-site scripting (XSS) vulnerability in e107_admin/db.php in e107 2.0 alpha2 and earlier... CVE-2014-4734 4.3 MediumJuly 21, 2014
• e107 fpw.php in e107 through 1.0.4 does not check the user_ban field, which makes it easier for remote... CVE-2013-7305 4.3 MediumJanuary 22, 2014
• e107 Cross-site scripting (XSS) vulnerability in e107_plugins/content/handlers/content_preset.php in... CVE-2013-2750 Public exploit 4.3 MediumJanuary 22, 2014
• e107 Multiple cross-site request forgery (CSRF) vulnerabilities in e107_admin/download.php in e107 1.0... CVE-2012-6434 Public exploit 6.8 MediumJanuary 3, 2013
• e107 Cross-site request forgery (CSRF) vulnerability in e107_admin/newspost.php in e107 1.0.1 allows... CVE-2012-6433 Public exploit 6.8 MediumJanuary 3, 2013
• e107 Cross-site request forgery (CSRF) vulnerability in e107_admin/users_extended.php in e107 before 0... CVE-2011-4947 6.8 MediumAugust 31, 2012
• e107 SQL injection vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote... CVE-2011-4946 6.8 MediumAugust 31, 2012
• e107 Cross-site scripting (XSS) vulnerability in the registration page in e107, probably 1.0.1, allows... CVE-2012-3843 4.3 MediumJuly 3, 2012
• e107 The cross-site request forgery (CSRF) protection mechanism in e107 before 0.7.23 uses a... CVE-2010-5084 6.0 MediumFebruary 14, 2012
• e107 SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions... CVE-2011-4921 5.1 MediumJanuary 4, 2012
• e107 Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0... CVE-2011-4920 4.3 MediumJanuary 4, 2012
• e107 Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier... CVE-2011-1513 Public exploit 7.5 HighNovember 4, 2011
• e107 e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a ... CVE-2011-3731 5.0 MediumSeptember 23, 2011
• e107 Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to... CVE-2011-0457 4.3 MediumMarch 15, 2011
• e107 Cross-site scripting (XSS) vulnerability in submitnews.php in e107 before 0.7.23 allows remote... CVE-2010-4757 4.3 MediumMarch 15, 2011
• e107 bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs... CVE-2010-2099 Public exploit 7.5 HighMay 27, 2010
• e107 Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote... CVE-2010-2098 7.5 HighMay 27, 2010
• e107 Cross-site scripting (XSS) vulnerability in 107_plugins/content/content_manager.php in the... CVE-2010-0997 3.5 LowApril 20, 2010
• e107 Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to... CVE-2010-0996 6.0 MediumApril 20, 2010
• e107 SQL injection vulnerability in the search feature in e107 0.7.16 and earlier allows remote... CVE-2009-4084 7.5 HighNovember 27, 2009
• e107 Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.16 and earlier allow remote... CVE-2009-4083 4.3 MediumNovember 27, 2009
• e107 Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote... CVE-2009-3444 Public exploit 4.3 MediumSeptember 28, 2009
• e107 SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User... CVE-2009-1409 Public exploit 5.1 MediumApril 24, 2009
• Show olderLoading…