Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
e107 Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2022-50907 - Vulnerability Database
e107

e107 Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2022-50907

High
Reference: CVE-2022-50907
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-50907
Title: e107 Unrestricted Upload of File with Dangerous Type Vulnerability
Overview:

e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrative users to bypass upload restrictions and execute PHP files. Attackers can upload malicious PHP files to parent directories by manipulating the upload URL parameter enabling remote code execution through the Media Manager import feature.