Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
e107 Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2022-50916 - Vulnerability Database
e107

e107 Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2022-50916

High
Reference: CVE-2022-50916
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-50916
Title: e107 Unrestricted Upload of File with Dangerous Type Vulnerability
Overview:

e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server files through the Media Manager import functionality. Attackers can exploit the upload mechanism by manipulating the upload URL parameter to overwrite existing files like top.php in the web application directory.